Commercial VPNs should only be used if Mandated by Corporate Head Office for working remotely. Otherwise - ones Privacy and Security touted by the VPN is suspect.
AntiVirus Software should be removed as per Developers Instructions. They are unneeded, cause havoc and interfere with the normal operation of the OS. There are no known Windows-like Viruses in the wild that self replicate and affect macOS because of the underling UNIX Foundation and Permission Limitation.
Recommended settings for Wi-Fi routers and access points