Solid writeup. Apart from some typos, just two minor nitpicks:
all ERC20 tokens can be stored in wallet you can create at myetherwallet.com and then to access them is most secure to use metamask Google or Firefox extension
myetherwallet can also be used in conjunction with hardware wallets, which is yet another step up from metamask
always use antivirus — Avast, AVG, Norton, ..
Nowadays third party antivirus software is turning out to be more of a liability rather than an improvement. They tend to install questionable root certificates and effectively MitM otherwise secure connections. All in all third party antivirus software increases your attack surface, so in most cases your probably better off using the antivirus software that comes out-of-the-box with your operating system (eg. Windows Defender in the case of, well, Windows).
It is also worth noting that against properly written, targeted attacks, most antivirus software is pretty much useless.
But apart from that, like I said, solid writeup.
