Windows Defender does much about malware gaining access with memory, file change, and even ransomware protection. When it comes to safely using third-party apps, my solution is UniGetUI (a graphical wrapper for Microsoft’s WinGet) to install, manage updates, and delete applications. It can also incorporate other repositories (I use several; scoop, chocolaty, pip, and a few others, so before I allow an update I have a PowerShell script that I run to scan the proposed update candidate for malware before allowing the update). If you ask me, Microsoft should purchase UniGetUI and offer it as the preferred third-party package management solution for Windows home users.
Ernie