I'm not a big fan of Windows defender or firewall, so I would look into a security suite that has firewall and antivirus like eset, comodo, or emsisoft. AV along with ZAM would provide some layer protection and won't blog down your system as Eset and Emsisoft are pretty light on resources.
A password manager would be helpful and saves some time typing them each time.
okay, sounds good. So you have WD and zemana protecting your system.
If you want to increase security without adding apps, you might want to use a standard user account for most of your computer use, and switch to admin account only when necessary.
For instance, you could set up a new admin account, and then convert your regular account into a standard one.
Definitely a nice lite config with Windows 10 security.
If you are using the paid version of Zemana Antimalware then I would imagine you are running it with real time protection enabled.
If so please edit your config and add Zemamna Antimalware to real time protection along side Windows defender.
I would consider adding an additional on demand scanner(s) such as Emsisoft Emergency Kit and or Malwarebytes Antimalware
Definitely consider a system backup solution.
Thanks for sharing your config