When an OS is first installed, there is only one account available, and that is an administrative one (although, by default, it doesn't have administrative privileges and needs elevating in order to have them). Whilst in that account, I install my AV and the latest drivers
(where required) for my hardware. I then create a standard account and from then on, unless there is a specific need to log into the administrative account, I log in to the new standard account. I can always provide administrative credentials for a program to install/run if necessary.