Seconding this. My husband is in the cyber security field and this is what runs on my PCs (I had 2, but one got converted to Linux 2 days ago because OLD). He runs more finicky stuff on his PCs but that doesn't sound like what your friend wants. Following basic hygiene I've never had a problem.

My go-to site for neutral, well researched product comparisons (The Wirecutter) doesn't appear to have reviewed anti-virus. I asked N if he knew of a good research site off hand, and he didn't.