Windows Defender does a decent job. It comes with the OS so one less thing to manage and Microsoft pushes updates to protect its OS constantly. If privacy is a huge concern, Windows talks to the mothership constantly. Sends back so much telemetry we really do not know what they are sending...