I use Windows 10 with a relatively obscure firewall software with a per-process/per-service whitelist, and try to not be stupid on the Internet. I also do regular backups. This should cover most of the risk model applicable to me. Has worked so far.