I think your advice is still quite sound Adam, though I'm sure Sam is the man to advise!
Since my first Mac in 1984, I've never installed any anti-virus software and to date, as far as I know, I've still never had a problem.
AppleInsider.com are often pointing out that a number of sensational "disaster" headlines are simply Apple click-bait stories and that infections only happen if you've done something rather foolish along the lines you mentioned by clicking on a link or providing information you really shouldn't or on iOS problems invariably require that you have jail-broken your device.
My basic approach is any emails from a/my "bank" or similar get marked as junk straight off. Don't provide a PIN and anything that says "dear customer" instead of your real name, gets junked. Always check the sender's email and if it purports to be from, Lloyds, say, but comes from "
ad...@specialbank.lloyds.fribble.tk" or similar should be treated as garbage.
I think basically it comes down to, check the source and destination of anything inviting you to click or tap or suchlike. If it looks a bit odd then bin it. If it is real then they will contact you again.
A happy, virus, phishing and malware free New Year to one and all.
Stephen
We are Costa of Borg. We will add your vibrancy and distinctiveness to our own. Your town and your customers will service us. Resistance is futile.