I ran DRWEBB AV software for many years on the Macs I use for my business and it worked great, once Apple updated to Big Sur, the updates stopped and the last time I checked, they where doing beta testing on the Big Sur Update.
As far as Malware and other software pest, I have used the same philosophy since the early days.
If I don’t know the the person or the origin of any attachment sent to me in an email, I delete it, period. Yes I have deleted files some of my clients have sent me, but unless they actually verify it by means of a phone call, it’s deleted.
Sounds strict but every person I know who has had any issues with infected files the same thing is common, the email look legitimate and I have had similar ones and they where OK, bingo!!
That’s exactly what these people who generate these phishing emails look for. Common sense goes a long way in today’s high tech digital world.