Many ransomware strains have the added ability to delete Windows Volume Shadows, thus trashing the backups. Macrium (paid) will protect Macrium images (Image Guardian) from malware encryption.
Hard Configurator, Config Defender on High, Win Firewall hardened, WiseVector StopX and Aomei backupper. Don't see a need for anything else. Do have Sandboxie but seldom use it.