Defender is 'usually sufficient,' it says in a blog post that might rile up the antivirus industry.