It's an excuse to buy a new Pi 4, which are pretty awesome (as if you need an excuse to buy a Pi :D ).
Printable View
New build instructions:
1. Install latest version of OS you can
2. Ensure local/personal/OS firewall is running
3. Disable IPv6
4. Connect to a trusted/clean network with a standard NAT router
5. Run OS update
6. Go directly to http://www.mozillia.org and download Firefox (or whatever browser you use)
7. Go directly to <insert company name> and download whatever AV product you're interested in
8. Re-enable IPv6.
Probably waaay over kill, but that keeps you pretty tight. A standard NAT router will prevent all IPv4 connections being established, which is effectively meaning you're not connecting directly to the Internet. It's different with IPv6 though as NAT isn't a thing, your computer is directly connected to the Internet and if your router isn't also firewalling, then all traffic can come through (not that I'm aware of a domestic router that has IPv6 support and not firewalling).
In terms of stuff getting your computer locally, it's drive-by stuff. Going directly to sites of the software you need means you're not exposed to advertising, and can download the latest browser which is the main attack vector these days.
ref Windows Defender and a fully up to date Win10 install
https://bit-tech.net/news/tech/softw...-benchmarks/1/
Best you can get, by all accounts