Minerva, if all/most issues are caused by stupid behaviour, why do you have NoScript on your machine, and why does it eliminate 99% of the problem? NoScript also requires quite a bit more education than a heck of a lot of people would be willing to invest in.
I personally haven't had any malware issues in at least ten years, but I still run AV because I would look bloody silly if I inadvertently infected a load of customers' computers with malware because of poor security on my own computer.
Malware is sometimes delivered through advertising on legitimate sites, targeting vulnerabilities in up-to-date software.
I've known quite a few customers who were silly enough to open attachments or click on phishy links in e-mails, but the situation also isn't helped by the fact that Java is installed on pretty much every PC when it leaves the factory for no good reason, or an old version of Adobe Reader, or they leave the factory without half the available Windows updates.
I think anyone would have to be pretty foolish not to run AV or indeed any easy-to-use line of defence which doesn't inconvenience the user significantly.
You've answered your question already.
I also run noscript on my macs too. Why? Because it's nice not to worry about some random stupid sound playing on a website or getting those screen darkening pop unders. If you read news you will be stunned by the amount of trackers that they use. Clicking on the noscript icon, sometimes the menu goes all the way to the top of the screen and that's with 1880 vertical pixels!
AV is quite silly for the advanced user. For the numbskull that clicks on everything, sure but even so all of them will falter. Those fake 2013 Security programs have been installed on machines completely surreptitiously regardless of running Kaspersky, McAffee, Norton, etc.
If people are too lazy to learn how to use noscript properly, then they can deal with a slower machine and problems with malware, AND pay the price of not having their machine while it's being fixed, etc.
It's hard to fix stuck on stupid.
And for the counter argument of "how do you know if you're not infected if you don't run AV?" crowd, I've used all the great utilities over at bleepingcomputer.com and never have I found anything on my machines, ever.
Block ads, all of them, everywhere with an appliance or hosts file, DNS, etc. as well. That's a good start too.
