Linux can be secured on much deeper levels than windows, by default yes it lacks antivirus but its also much less necessary given the software distribution model of Linux vs windows. But ClamAV is a decent antivirus that I use on my Linux server. Never felt the need for one on my workstation/laptop
It also compiles packages with newer architecture feature support than mainline arch. All of its packages are compiled for x86_64-v3 and x86_64-v4, as compared to the x86_64-v2 of standard arch. This improves performance at the cost of older CPU support