This is the kind of positive post I like to read... after doing some cyber crime courses with work - it seems the more easily accessed systems are via sheer ignorance / stupidity by the userthat most AVs wont catch as such .... Duped 2fa requests ... dupe sites asking for logins and passwords - dodgy links - sitesI only use defender and have done for a long time. I work in the security industry, wrote antivirus software in the early 1990s and regularly play with malicious stuff on my network and defender is more than adequate for catching this stuff.

But like most things they ain't 100% and the sheer number of addons / upgrades that they charge for makes me think they 'find' problems that arent really there and fool you into buying more than you need.
Will certainly try Defender again when the current Kaspersky sub is up.