- chmod 500 /home/bob
Now your user can't create or rename files in that top level directory. This means your programs can't either.
- Set XDG_CONFIG_HOME to /home/bob/.config
There are more variables, but this one alone is the biggest change.
- Move/remove offending programs.
Self explanatory.