Overall Win 10 seems like a better performer to me than Win 7 or 8, although maybe just a bit larger on the memory footprint. I would say at least 8 GB minimum to run 10 comfortably.
Win 10 seems setup to do a bit of housekeeping after booting up, and here is where I see the biggest difference in two systems where I run Win 10. One has SSD and I have turned off the superfetch and search indexing. It is ready to go right after the desktop loads.
But on my laptop with a conventional HDD, the disk goes to 100% for a few minutes after booting up. Once it settles down, it runs fine. Anything checking for updates may slow this down a little as well.
Looking at Task Manager, Windows runs some optimization routines under Service Host: Local system, related to superfetch, etc., where it scans the drive a bit before it get things all settled in. I just let it run till it's ready to go, so things will run fine afterwards. That would be the best reason to upgrade this device to SSD, but tearing the keyboard out to get to to the drive makes it a little less important.
As far as AV goes, I think if you run Windows today that you definitely need an AV. Even if you occasionally go online or connect a USB drive, there are just too many malware exploits out there now. Unless you back up your system daily and keep the backups offline (which you should do on occasion anyway), why take the chance?
I run Avira on both my Win 10 systems without any issues. Avira Free is light and has the same AV engine and cloud protection as the Pro version. The only thing Pro adds is optional web and mail protection, and comes with support. Avira gets top scores on many 3rd party tests. It's probably going to be better than Defender, but I have heard that Defender has improved some lately. In any case you can just open the GUI to switch real-time scanning on/off if you prefer not to have it running in the background. Then just scan on-demand as needed. If you open a web browser or plan to download anything switch real-time on.