Nah, those are fine. It's the scummy gaming sites like sharemods that install malware on your computer.
I find using NoScript helps quite a bit. that way random scripts cannot run on websites without you allowing it, you do need to manually allow scripts on websites you trust mind you... but yeah, NoScript is great, for example Guru3D forum here has 5 scripts running, I allow 2 of them. Using a custom Hostfile is also good, I use this one http://winhelp2002.mvps.org/hosts.htm , the individual that made it updates it from time to time, I've used it for years To install the Hostfile I use a program called HostsXpert, with it you can also set the Hostfile to read only so it cannot be altered without your input.
But OP, what is the purpose of this thread, do you really think for 1 second that Windows 10 will provide its Windows Defender and being better than a commercial antivirus and Firewall with HIPS software (like Kaspersky and Co.)? Often it costs 70$ a year for such a commercial protection, so it's crystal-clear that Microsoft cannot provide a good protection for free. Did you expect something like this, or what is the purpose of seing Windows Defender not finding a particular threat? I think that in the scenario where you only use Internet to browse safe pages with free Firefox browser, and nothing else please, then yes, you can use Windows Defender in Win10 only. But as soon as you start file sharing or other stuff you need a better protection.
Defender good enough for me. Been on Avast for years, but since last fresh install just stuck with defender.
There have been more concerns voiced during the last few years that Antiviruses themselves are giant security holes and that you're perhaps better off by relying on an updated OS and its built-in protection https://arstechnica.com/information-technology/2017/01/antivirus-is-bad/ And one example just three months ago https://www.theregister.co.uk/2019/11/12/mcafee_av_vulnerability/
Even worse than this, many years ago a very smartly designed malware used my AV's scanning engine to spread itself throughout my PC. Had to format all the drives to get rid of it.
And even when AV works paid AV isn't necessarily any better than free in all cases. I remember in college computers used F-Secure yet my USB thumbdrive got a virus from one of them. Meaning F-Secure's up to date version didn't find it / block it. Yet the instant I plugged the drive to my home PC, AVG with two months old database (had no Internet access at the time) found it. Oh and Avast found it too btw. I tried using the same drive earlier on a mate's computer but Avast blocked it. First thought it was false positive but got the exact same detection w/ AVG at home.
Avast FREE is sending a lot of telemetry back home, which is sold to 3rd parties. Source: https://www.vice.com/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation You're welcome!