The only thing I disagree with is the suggestion to use an anti-virus (besides the one built into Windows and macOS).

Studies have shown that antivirus software (in addition to the built-in protection offered by the OS) is mostly useless and can actually lead to worse security because of making users feel like they can lower their guard.

The most important advice is always to ensure that your system (OS and apps) is up-to-date and that you’re installing all updates, especially security ones.

All of the above is documented on a paper from Google: https://www.usenix.org/system/files/conference/soups2015/soups15-paper-ion.pdf

Secondly, use MFA. Malware is much less of a concern now than stolen identities, and MFA can block 99.9% of attacks (https://www.microsoft.com/security/blog/2019/08/20/one-simple-action-you-can-take-to-prevent-99-9-percent-of-account-attacks/)