Actually it's ok.
I just got back from another "Advanced Plus" configuration, in which they are using a very similar setup to mine with these differences:
UAC set to "Do not dim"
No VPN
Risk factors including visiting shady websites, etc.
If this is what I need to do to achieve "Advanced Plus", I think I'm better off and more secure with my basic setup.