You need to limit what a service can access. You should change the service's:

Dependencies define which other services must be running before a particular service can start, but they do not directly control the access rights of the service itself.

A service's status indicates whether it is running, stopped, or paused, which does not define its access permissions.

The startup type determines how and when a service starts (e.g., Automatic, Manual, Disabled), but it does not control the service's access permissions.

A service's logon options determine the user account under which the service runs, directly impacting the permissions and access rights it inherits. By assigning a service to a less privileged account (e.g., Network Service, Local Service, or a custom low-privilege account), you can significantly limit its access to system resources and files, thereby enhancing security.