Not only that -- but they increase the attack surface. Since all non-OEM antivirus are essentially using undocumented APIs and hooks into the kernel they have b

Not only that -- but they increase the attack surface. Since all non-OEM antivirus are essentially using undocumented APIs and hooks into the kernel they have been exploited due to flaws in them. My company has Windows Defender (which does a fine job by itself), McAfee, and CyberArk EP (which AFAIK, just does exe vetting on-demand). I start my laptop up and it uses 50% of it's 32GB of RAM (not cache!) from a cold boot. Granted there are some IIS services and whatnot dev tools running but still. Plus the kernel just hangs every other day for a couple minutes. Yay! At my last job they also used McAfee in addition to Defender but I found a way to uninstall it. And the local IT guy gave me a pass when his management console said mine was unprotected.