Windows does have Defender, which does some amount of tracking signatures and heuristics of various types of malware.

It has not, however, proved enough to fend off different real world problems like ransomware.

Hence, the market for 3rd party solutions that are more aggressive. And to keep up with real world threats, they have to update often. And have to run at high privilege levels. So now you have the situation where those third-party solutions have the ability to create a bsod and/or a boot loop. Which should mean that they have a very well thought out way to roll out updates.