One point to make the operation of Raspbain OS more secure, there are instructions like this on the net:
The default user/password must be changed. At least the password should be changed. To increase security, the user name should also be changed.
The script Running on Raspberry Pi : Node-RED is strongly recommended for installing Node-RED, but the installation only seems to apply to the user 'pi'. But this should be avoided.
How is an installation as recommended possible, but with any other user name?