I find LittleSnitch (outbound firewall) reassuring to let me moderate which applications are allowed to connect to what.
I'll move to Arch if I need to install anything else that remotely resembles bloat.