Yes! Not just AV but exploit guard and other security features. "I am too smart for my browser to open a phishing link" or "windows update will save me from exp

Yes! Not just AV but exploit guard and other security features. "I am too smart for my browser to open a phishing link" or "windows update will save me from exploit kits" is not a good strategy. At least turn on defender (corporate/server is an entirely different beast).