Even before XP SP2

Even before XP SP2, no AV had been installed on my computers, and nothing happened related to security concern. Now I am thinking to turn off the firewall of SP2.

CutOnce said Microsoft also suggests using third part anti virus protection, I was surprised?