Well, I don't.

First, Apple DOES include antivirus software in its OS.

See https://www.howtogeek.com/217043/xprotect-explained-how-your-macs-built-in-anti-malware-works/

I do also run Malware bytes and have done so for many years. It has never found anything at all. In all those years, nothing. I run it once a week now.

I tried some of Mac A/V programs. One of my nephews is a bigshot at Sophos, so that was an easy choice, but every one of them slowed down my machine and again, never found anything.

I do follow all other things you suggested and more, but I don't use the resident AV programs. It's possible that my M1 could handle the load that affected my older machines, but at this point, I haven't bothered to try.... although maybe I'll talk to my nephew and try Sophos again.