3. When generating private keys do it as securely as possible; this includes using a local machine free from malware and trusted software which can't easily change without you being aware
I was not aware about this aspect. Does have a good anti virus sufficient to handle this?