My ultimate solution is as follows.
First, I install Windows, install missing or update drivers, and install Windows update. Then, I create a full system image using Aomei Backupper Pro.
I install all the software I need and do my configuration then create another full system image.
Regarding my personal files, I have them synced to my OneDrive and I access them when needed. The other important files are also stored on my external hard drive.
Now let's say I got hit by a ransomeware, all I need to to is to restore system image and ta da, a clean system with everything installed and configured. My files are safe in the cloud, too. If any files that are store on the cloud get encrypted, I can always restore the previous clean version thanks to OneDrive versioning feature.
Thus, in my opinion, if you practise good habits and have backups, you do not need to have anythings besides your security suite for protection.