Jefferis Peterson wrote:
ThANK YOU GUYS You are a world of help. IT may take me a time to implement them all. I will note that Bitdefender has caught and protected my system from a lot of email (from windows mostly) attachments that are malware. Maybe I have been overly cautious? And I have used VPN when traveling to protect my logins to financial sites, eg., like when I am in the airport using public wifi Are you saying that is not necessary?
“Coffee shop” VPNs: A poorly-encrypted second layer of encryption for but just part of the connection, wrapped around the existing and robust end-to-end encryption, a scheme of dubious benefit for adding security, and badly solving a problem that hasn’t existed for a decade or so, but absolutely perfect for collecting personally-identified metadata.
Your fears around public Wi-Fi collecting your metadata quite possibly came true here too, though the collection through the tools you yourself installed. Fears that were explicitly created and intended to target you, and to convince you to expose your own metadata.
Use the end-to-end encryption. For better privacy, enable and use iCloud+ Private Relay, as that prevents the first part of your connection from even knowing where you’re connecting, and prevents the destination of your connection from knowing the source.
Scams and malware and the rest aren’t as commonly targeting our gear, the scams and the malware are more often targeting us ourselves. Phishing, spear phishing, scams, sketchy security apps, password attacks against re-used passwords and compromised passwords, cracked apps and keygen tools, etc.
Have any of the issues reported by your add-on anti-malware gotten past the built-in anti-malware and target macOS? More than a few of the add-on security apps are just noisy, and for negligible benefits. Windows malware doesn’t affect macOS.
And does the stuff even work against current Windows, or are even the Windows reports spurious? And are the erroneous reports worth the noise? Some of the better known anti-malware for macOS was caught and fined* selling personally-identified user activity and personally-identified web purchasing data, and others have been caught making false reports for months, ot trying to corrupt macOS itself.
Some reading: Better Securing Your Data, and Apple Acco… - Apple Community
*the vendor was fined not because they collected and resold the personally-identified data, but rather because they did not disclose the sales in their fine print. Fine print we all read and understand of course, and fine print that is obviously written for complete clarity and transparency.