Welcome to the 'find out' phase, which should wrap up nicely by around the 7th.

This is really close.

I do this shit for a living.

OP, go download Firefox and then go to https://stigviewer.com/stigs
And find Firefox. This will cover all known low level security controls. This will keep you from ever being vulnerable in the first place. Just follow the fix text for each control you care about and you're done.

While you're at it, go through the windows controls. Hope you know regedit.

Looks great my dude.
If you expanded out the environment variables a ton, making it more customizable, (with default values in place of couse) this could appeal to a huge range of people.