If you run Linux and care about security then you should install openntpd. It takes seconds on Ubuntu and will replace systemd-timesyncd. Unfortunately OpenSSL lacking LibreSSL libTLS means constraints aren't enabled but it is still far more secure from exploitation where it really matters.