Xtreix Yes I am aware of MS Defender additional options even Attack Surface Reduction and tweaks in GP but what is my main concern is not that one would download malicious file, click malicious link, open sus attachemen of an email, but... mostly Browsing, yes the main defense is user ofc, but the problem is that today even a legit site can be infected or manipulated to redirect to malicious, have some drive by download magic etc.
I am not sure how much it is valid, but I saw many test runs of this guy:
https://www.youtube.com/@pcsecuritychannel/videos
He constatnly proves that MS Defender is not bad but it still lacks, I do not know what is his background exactly but people stated that he was/is a profesional in the field.
Also, I am not sure how much you can f-up MS defender and all when you tweak Win 11 with limiting telemetry as much as possible and also cutting down services and apps that are running and are installed by default, also removing some other thing like copilot, recall etc. Basicly slimming down the OS.
Also I know that MS Defender has SmartScreen feature which helps with web reputation etc. basicly that I was talking about above but... it works only in Edge and Edge is well... lets not talk about it. The integration with other browsers like Brave is not there.
Btw about Windows Sandbox, cool feature but:
https://www.youtube.com/watch?v=O20WhmCspqo
So... very interesting :)