The combo you have right now is safe since they require you to manually run them and don't constantly run. Additionally, as long as you are careful as to where you download files/programs from and scrutinize any that ask for your Administrator password to install themselves, you are usually good..
If you regularly stick to getting apps from the App Store, that is the safest. But that isn't possible for all the apps, so trusted developers (the usual default) apps are generally OK..
The bulk of the issues on the Mac arise from when people hackers replace a good DMG/PKG file with a bad one that installs your intended application but also some malware along for the ride, and the second is usually browser hijacks that will inundate you with pop-ups or redirects. The first is usually mitigated by the App Store, the second is mitigated with a couple of extensions (Ghostery or uBlock Origin)..
At the end of the day, you being diligent will go a long way of keeping you and your data safe from hackers/ransomware/malware and what have you..