~snip~
I think it's better to have a reliable security solution on every device that has access to the internet - so although many people disagree, I've always used a top rated security suite on my devices, which includes protection against viruses, malware, phishing and of course a firewall.
I would describe it this way: when you surf the internet, no matter how careful you are, you can always pick up something malicious - so the second line of defense is the security software on our device. To put it figuratively, it's like having a door on your house that is closed, but if it's not locked then there's always a risk that someone will open it without any resistance.
For people like the OP, such things are something about which there should be no doubt - because we read stories like this in every bull run.