How to prevent remote login for SYS

Set the system parameter

ALTER SYSTEM SET remote_login_passwordfile = NONE SCOPE=SPFILE;

Then restart the database.