All these factors should be taken into account. A risk-aware Windows user can probably survive without any anti-virus software at all. I ran Windows XP for a year to try to prove it.