lousken

1) windows defender

2) ublock origin + privacy badger

3) using brain before i click on stuff

4) keepass for logins and veracrypt for private stuff

baal80spam
I do the same, plus a (heavily) modified hosts file and simplewall (https://github.com/henrypp/simplewall).