If you are going to renew WSA then I would use that in real time since you are using ZAM as on demand.
You could then add an additional on demnad scanner such a Emsisoft Emergency Kit.
Avast free and Windows Firewall is a good lite combo but WSA will work well also.
Cloud storage for data and files is fine but a system backup solution is also advised.
Macrium Reflect and AOMEI Backupper offer good free solutions.
Thanks for sharing your config