Defender can be seen as merely being the lesser evil. Consider CVE-2017-0290[0], which was caused by the MsMpEng process running a custom unsandboxed javascrip

Defender can be seen as merely being the lesser evil. Consider CVE-2017-0290[0], which was caused by the MsMpEng process running a custom unsandboxed javascript interpreter with system privileges to evaluate untrusted code for maliciousness. Remotely exploitable over many unsolicited channels. Pretty much the worst kind of exploitability. Of course other AVs have done quite similar mistakes. [0] https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5 https://bugs.chromium.org/p/project-zero/issues/detail?id=12...