Doas instead of sudo....?

If your threat model is such that sudo is a problem, you’re much better off using wheel and su.