In the same vein, what is the biggest risk vector? My general impression is that AV will NOT catch new malware 99% of the time. I am to the point where I don't

In the same vein, what is the biggest risk vector? My general impression is that AV will NOT catch new malware 99% of the time. I am to the point where I don't keep ANY/identity personal info on my computer.