Partly a joke, but with a grain of good advice. However, it doesn't really work. I live in a different country, and hence am not available for in-person troubleshooting when something goes wrong. I'm really looking for a set up and forget option.

Just something like, have Windows Defender set up, make these sensible changes and for the most part it'll be fine.

To be clear, I don't need to protect them from standard call center scams, egregious phishing attempts or so. They seem to be good enough at identifying those very obvious ones.