It is much better if preventive measures are taken than to fix something already broken.
Losses from the thefts or broken equipment from hidden mining is much more than the cost of antivirus
Unfortunately, people do not think in advance about the consequences of such losses, and the antivirus costs money. No one wants to pay money in advance. I like tactics of Romad to pay for antivirus only for the fact of the attack but not beforehand.
Now it is very hard to find a antivirus to prefer and paying for the fact of attack is a good argument to choose this antivirus.