If ever you want to get a Macolytes blood to boil, ask about AV products! 🤪 Don't you know Apple products are perfect?
Macs have built-in protection (much as Windows has with their OS now), but the fact is that bad players traditionally went after Windows machines because there were more of them - Macs being more 'fringe' products used by fewer people. That is not the case now. And while both built-in AV products are pretty good at keeping themselves updated (though Apple prefers to pretend 'There's nothing to see here'), many 3rd Party AV apps - whose job it is to just do that - may update their libraries of known issues daily.
Some Mac users complain about system resources being used by these products (like other apps don't), but those I have tried in the past - and even on base machines - have not caused me significant issues. I currently use the paid Bitdefender on my 2017 Air (and it has an extension that embeds itself directly into a browser), though I have used both the free Avast and Avira products with no issue. Its maybe worth checking out the lab tests / reviews at
https://www.av-comparatives.org/consumer/test-results/macos/ if you are interested.
A far as concerns about websites tracking / swiping info as you use them, then you may want to explore the browser (and extensions) you use. Again, Apple's own Safari is known for some security, and there are some additional extensions (most free) that you can add to increase that and make you less visible online. But my default browser is Firefox, which out of the gate is more security focused with more granular control, in my opinion. Plus a few extensions.
And if you want to get even more 'belt and suspenders', there are services / settings that you can do that route info coming to you through their own filtering services, blocking some gunge from even reaching you and making you less visible, if that is your choice. Here in Canada, I use the free CIRA Canadian Shield (CIRA being the non-profit that looks after .ca domain registrations) overall on my Mac, though it also has a browser-specific extension on Firefox (don't know about the others).