Seems good to me. You see to have covered all angles.
I would replace the local account with a outlook account because from what i saw the local one can be bypassed easily. That's assuming someone physical access to your pc.
@Dirk41 Rehips isolates application(an isolated application can't do anything to the real user profile and files) that are at risk and you can isolate any application you wish(don't do security software they will lose their purpose because they will not be able to access anything).
Also it has parent child monitoring which is basically an advanced anti exe.
I use Rehips since the start so if you need any more info pm me.I don't want to mess this topic.
If you know what you are doing and you are careful an AV is irrelevant. At least the signature part of the antivirus, the behaviour blocker if it has one has a use.