I would not have recommended MS Defender a few years ago, as it tended to rate near the bottom for protection from three of the major independent security organizations. That has apparently changed recently, and its protection capabilities are now on par with other top security apps. I would have no issue using it now in Windows 10.
Commonsense and vigilance these days can go a long way in protecting your systems. One of the most effective ways is not using a default admin user account in Windows, especially when connected to the Net?
This is why most enterprise environments do not allow staff to have admin privileges. Case in point, my IT dept just received a security vulnerability scan report of all our organizations PCs. The second worst system turned up in our unit's design department, which registered nearly 1,000 vulnerabilities. Result of non-IT staff personnel granted local admin privileges under our objections. Even-though, running a recent MAC system.