>However I do, think Microsoft deserves some blame, since if Windows was more secure by default there would be less need for 3rd party anti-malware software that can fail so catastrophically.

There's actually a first-party product: https://learn.microsoft.com/en-us/defender-xdr/microsoft-365...