Technically illiterate users should leave the default security settings enabled.
In the modern day, I actually think this mostly works? Are you aware of instances where normies installed Windows malware because they purposefully disabled Windows Defender?
Everyone always talks about the "Dancing Bunnies Problem" but I'm not convinced it's actually a thing.