How can you better secure the Drupal admin user (user 1) from outside attacks?

Do not give this user an obvious name like "admin" or "administrator" which are too easy to guess

Cancel the user account for user 1.

Removethe "Administrator" role from user 1, which makes them an anonymous user

Only allow members of the Drupal community in good standing to be user 1.