That’s how encryption keys are typically stored.

If someone has enough access to your system that they can get to your stored encryption keys, you have much bigger problems.

I use Bitdefender, and it’s great.

One tool I install on every computer I work on is Unchecky. It automatically unchecks all of the “install bullshit Spyware” boxes when installing programs.

But, really the best option is to make them a user account that can’t install software. Windows Defender is actually pretty good if the user doesn’t have admin privileges.