I say this coming from around a decade of running Linux or MacOS on the desktop. This just works.
I'm not running a Windows Insider build, and the current version of WSL doesn't accurately represent the posix permissions on files seen via the /mnt/c mount (DrvFs). The next version resolves this by storing posix permissions and other meta data. In my case, being unable to manipulate the permissions causes us some problems. It makes a lot of sense to work on the files within the VM, in a native ext4 volume.
Windows Defender protects from Windows malware entering via WSL and Linux malware as well.
For example Windows Defender has caught comprimised npm modules inside WSL.
What I don’t understand is why antivirus has to second guess the user.