Windows 10 of 2019 is much much more safer than windows 7 or xp as example. Much safer security defaults and dozen more security features. So firewall, hosts and unlock origin is what I use. Backups also. Sometimes I do test on VM or via clamav. Defender is off. I did setup 'run only from predefined folders policy' and non admin users for my relatives.