Turning off remote desktop is incrementally safer, but it is a very small piece of a much larger puzzle.