I’d remove the add-on anti-malware (Avast in particular has had surprises) as apps in that category have caused various stability and integrity issues over the years, and I’d suggest learning more about the threats we are now encountering. Which aren’t viruses, all the security-product marketing and VPN product advertisements to the contrary. We’re getting hit with phishing, password re-use, lack of two-factor, and weak passwords getting exposed… And with security products collecting our data, as has happened with various providers including Avast.
Some reading on the current landscape:
Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support
Effective defenses against malware and other threats - Apple Community
Device and Data Access when Personal Safety is At Risk
If you don’t have two-factor authentication enabled, and don’t have at least one and preferably more than one backup running, go work on that now. Two-factor is a last-chance means to prevent password compromise, and those backups are how to recover. If your data is sufficiently valuable to you, rotate a subset of your backups entirely disconnected and/or remote, to reduce the chances of losing all data after a breach or a fire or a flood or a burglary…
High Sierra security and connection security is still decent, though there are various apps and vendors that no longer support that version (Microsoft supports the three most recent, for instance, and new Apple apps can require the current version), and High Sierra will age out further with the release of Monterey later this year.