I use listenbrainz to scrobble (track played music). I like it because it is open source, and they publish using open data. This means that everyone has an equal right to the data, and can use and extend it however they want, which is a feature I wish more services.
There is also Ryot I am keeping my eyes on, as it promises to be an encompassing tracker, including tracking music, but its currently in development.
If I download a file from a questionable source: scan it (with clamscan) If I run an executable I don’t trust: use a locked-down (with firejail)
No matter the antivirus, if you keep downloading and running questionable files, you run the risk of viruses. I would say that browsing patterns are more important than any antivirus.