How to configure Mac screen sharing to ONLY listen on localhost?

You have to execute this in Terminal:

sudo defaults write /Library/Preferences/com.apple.RemoteManagement.plist VNCOnlyLocalConnections -bool yes