Yeah but this is more from the perspective of a blue teamer, someone actively looking for/protecting against malware or performing forensics. If you're not in that position, just have some good AV and don't do anything that might make you a target.
Like "don't get connected to the Internet"? That's a tall order.
Being targeted by an adversary is not the same as being hit by random drive-by attacks hitting every IP in the relatively limited IPv4 address space.
If you are a high value target, AV is useless, since the attackers you care about will target you with bespoke mallare, that will not be in an AV database.