I've had a Win 7 running for 12 years as a media server, never once been hacked.

ISPs and even old school Win 7 to Win 10 OSs have the old ports blocked by default that prevent "drive-by malware".

What you are talking about is the equivalent of a Boogeyman that only exists because people are stupid about what they open up or install or allow to control their firewalls. Your points even prove that.

You can open a Netscape browser on Windows 95 and not get hacked. But of course you believe opening a browser opens you wide up so just ignore what I say.