Security and Antivirus

The AI driven threat detection get false positive sometime, so keep that in mind. Most of the time you never need to visit a recently registered domain, legit business are usually prepared long before they go public. All of the option in that page can be enabled unless you specifically use public DNS record for local IP (in which case disable the rebinding protection) or DDNS (in which case disable dynamic DNS hostname block).

If we're talking about Android, AV are mostly just snake oil, Google Play already scan installed apps regularly.