I agree with Dr. Antonakakis that endpoint AV is more trouble than it’s worth. I haven’t had AV on my computer since I was running WinXP. (I let Windows Defender run, though it has an annoying bug where 7zip executables are flagged)

My strategy is only valid because I’m the only user of my machine. I’d certainly install that stuff on any computer that I shared with someone else.