One of the things to lament is that it is so hard to find any reasonable
examples of how to set up various configurations in a secure manner.
There is voluminous documentation. Some of it is dated. Some of it is
contradictory. Most of it assumes at least general familiarity with the
topic.
Accurate time/NTP is, on one hand, fundamentally important to a variety
of needs, but on the other hand, is usually implemented just "well
enough."
... JG