[vachina]

It actually is not dire, if you don’t expose your Windows installation open to the internet (and disabling ipv6).

You’re much more likely pwned by phishing or running malware from software updates.

[blindriver]

You forget about browsers and malware and bad websites forcing downloads onto your machine.