So disallow HID_DEVICE, HID_DEVICE_SYSTEM_MOUSE and HID_DEVICE_SYSTEM_KEYBOARD. This would, if I'm following Coleman's link right, disable all USB input devices.
Eliminate random USB, Wi-Fi, and SSD freezes without sacrificing stability.