When you say something works well because you didn't see or feel anything, then that doesn't necessarily mean it's working well. And when you argue that you can always make sure by using secondary scanners, then that goes against your belief that what you're using is good enough.
About having to tweak Microsoft Security, consider the reasons why Microsoft has to make you do that. In short, figure out why they didn't activate those settings to be tweaked by default.
For web protection, some here say that it's not needed for the AV to provide that; instead, add it yourself using a security addon. Others argue that that might not be good enough if the addon won't check using heuristics. In addition, some features that are part of web protection might interfere with other software, like Adguard for Desktop.
I'm not sure, but I think Bitdefender free doesn't include ransomware remediation.
If you add more features, then it might increase systems impact.
Finally, you can also look at results of tests done by Youtubers and by companies. For example, go to
www.av-comparatives.org
and check results for real-world protection, malware protection, and performance, and sort by protection or performance value. You'd be looking for security programs that do better overall for the three. (Keep in mind, too, that results may change after several months.)
It's up to you to determine what weight to give for each. For me, performance is more important, so it's either Kaspersky, Avast, or AVG.
If you consider additional features needed for protection, then for free ones you can probably consider AVG or Avast.