This is my standard time to paste it: Most of the enterprise configuration options in Defender can be put in place on a standalone desktop by opening gpedit.msc. You can configure exclusion paths for node_modules. You can configure sensitivity ("cloud protection level"), you can configure "Block at first site", you can configure "Potentially unwanted software" detection. Which you may choose to disable, but is absolutely brilliant for family members downloading "questionable" software.
The Attack Surface Reduction rules can be put in place here even for people who disable realtime scans or use alternate AV products and provide significant, clear security benefits. The "block access to lsass.exe" option breaks mimikatz, procdump et al and is absolutely underrated for its capabilities. And free.