I sandbox stuff, using firejail or VM’s. coming from a cybersecurity perspective, AV’s are ok but they also aren’t stoping 0-days or malware that has been coded well by a good hacker.