Exactly:

• keep credit reports frozen
• use a password manager and random, long passwords (and ideally usernames too)
• use MFA/2FA where available

If you do that, you'll prevent the vast majority of problems.

Credit monitoring services just alert you when something bad happens, which means you've already gotten screwed. And honestly, you probably don't need to check your credit report that often, once a year is probably fine, provided you've frozen everything already.