If you want arch but you have live (/jk) you can just use endeavorOS. It is Arch but with an easy installer that even sets up yay, so afterwards you can just write „yay [desired pakage]“ to install stuff

You have to enable firewall for each service (each port on which your pc is reachable) and I recommend systemd-manager to have a easy overview on which deamons are running.

Ah, yea, if you want NVIDIA driver, you can use nvidia-inst and to switch back to nouveau, use nvidia-inst -n