Hello
As said, I recommend you to activate the Windows UAC.
Personally, I would advise you to set it to Always Notify, this will protect you from unwanted modification attempts.
For tracking protection, since you have Cloudflare DNS, I can recommend µBlock and Ghostery. Brave does include a blocker, however, I find it rather average (based on Adblock).
Another recommendation, make regular backups of your files and especially a system image!
This is very advisable in case of crashes and especially in case of infections (by a Ransomware for example).
For the scan outside Windows Defender, you can add Malwarebytes next to ESET Online to complete
