There are some things that can’t be helped, depending on your use case and work requirements.

So I double up or replace every built in (security) feature to be as independent as possible. Tinywall on top of the Windows firewall, Bit Defender on top of the Antivirus, Firefox instead of Edge, offline account instead of MS logon, etc.