You can read about
[MUST READ] How to update your security config without creating a new thread! and remember to re-fill all required custom fields. Otherwise, you'll get an error.
I believe that Less is More. It's also dependant on the type of user behind the screen and if it's a single-use or shared computer.
A shared PC, setting up a Standard account over an Admin account is a very good method to prevent unwanted software and malware - just remember to add a password to the Admin account. This will stop Standard accounts from bypassing the UAC prompt for installing software.
If I am correct VoodooShield recommends to disable User Account Control - which I oppose regardless on what's on offer.
You may want to try / recommend Ublock, as now most known Ad-blockers have Acceptable Ads enabled by default (AdBlock, AdGuard, AdBlock Plus). Modifying the Windows Host files requires some knowledge, otherwise things can go wrong.
Adobe software provides automatic updates, so unless disabled, the users are now protected. Browsers like Chrome and Internet Explorer/Edge get automatic updates from Windows Update or Google Updater.
I haven't gone in-depth about everything on your list.