Do I need Security Software

There's a really good small YouTube channel called something like 'pc security expert' or along those lines. They did a video in the past couple days where they tested the default windows defender against 200 of the latest ransomware attacks. Windows did a half decent job blocking most, but a few seemed to get through. Of those however, the ones that did infect the virtual machine were pretty much brand spanking new from the past day or 2, meaning they often aren't even recognized by full on paid AV solutions. Windows defender is fine. The way it works typically means that by the time you might accidently click on some malicious bit of code or whatever, it's already part of Microsofts database. This means as long as you aren't torrenting sketchy things on the day they are uploaded or whatever else of that ilk, you will be fine.