Level 9
In most cases it is a good sign that the program has a lot of RAM, it will have a faster response and will use less processor, unlike some AVs that use little RAM and a lot of processing power, giving the user the illusion that the program it is light just because it uses little memory.
Like Norton when you do a manual scan or live update, but Norton engine depends a lot on the cloud.

Overall, it depends the user needs and type of hardware.