Dan Goodin on Nostr: Microsoft says in the post (see toot above) that the agent isn't enabled by default ...

Microsoft says in the post (see toot above) that the agent isn't enabled by default and that only experienced users should enable it. What are these users to do to prevent the attacks Microsoft is warning of?