WebXR can indeed be hit and miss, it depends a lot on the browser and on your graphics card. Godot requires multiview support and that isn't working properly everywhere.
As for the windows defender error, it's likely a false positive but I highly recommend scanning your HD just to be safe.