For regular everyday use - Windows Defender is totally fine (as long you keep updating the definitions)
If you do questionable stuff (no judgment) or visit higher-risk torrent sites, etc., I would use F-Secure or something similar that is reliable and keeps a smaller footprint on your system. A lot of the others bog your machine down with unnecessary nonsense and unneeded features.
Also too, you should consider your router choice. Most offer additional protection. Having your hardware add extra insulation is something most people don't consider (or realize).
IMHO VPNs are a waste of money unless you need to access something blocked within your country, or whatever. Again, it's all really subjective and dependent on your needs.
Safe surfing!