I am under the impression that there is no real way to protect the hosts file completely without creating a none-admin user account on my Mac and setting the password of the admin account to one that I won't remember.
So therefore I would like to make editing of my hosts file difficult as a next-best alternative.
I have read that it is possible to set a system immutable flag on specific files which would need to be disabled before the files are able to be edited.
So of course it would still be possible to edit the hosts file, but it would at least make it a bit trickier.
Is this a recommended approach? or is there a better way to achieve it?