Windows Defender is actually really good for the common person. If you’re doing highly risky things then perhaps getting better software would be warranted. But if your doing low risk activates, Windows defender is pretty great.
Also, that’s not what VPNs do; you can still download ransomware through a VPN tunnel.
Pretty sure you can sign up with a username now for signal. No number required.