Best practices for Laravel security

I wanted to start a discussion about Laravel security best practices. What are your must-follow security measures when developing a Laravel application? I usually implement CSRF protection, input validation, and prepared statements for database queries. What else should we consider? I would love to hear your experiences and recommendations. Please share your thoughts and if possible, provide examples or code snippets that could help. Thank you in advance for your help!