These are the things I do on a new build before anything else ...
Use Windows Sandbox to safely install and test unknown apps in an isolated environment. Protect your PC from malware and risky software without affecting your system.