I think it is safe configuration. Not the best but only enough.
What for? It is only illusion. Human is a weak cell in the chain. All of us need think. Any softwares can't save us. We have to be watchful. This is a recipe.UAC is a must-enable, because it works natively at kernel level unlike other security softs. One click is not so annoying. Avast or any AVs can easily be shutdown without your notice by advanced malwares.
I use Bandizip and MSOffice.Other Software: You may add 7-zip, LibreOffice/WPS Office/Open Office/MS Office (choose one)
Add a backup browser just to be in case any issues might occur.
Well UAC will be your pretty safe last resort option against those drive by execution which terrible if you didn't notice it. You may add Voodoshield which acts the same concept however you need a little tweaks to maintain the sensitivity.