Paranoid Banking Computer.

[Sampei.Nihira]

@Andy Ful

Better protection (free) against zero-day vulnerabilities could be achieved with 0Patch:

Long Live Windows 10 - 0patch

Pricing and Plans - 0patch

P.S.

As you know, I wouldn't use that PC exclusively for online banking.

 

[Andy Ful]

You have successfully built a "digital fortress" that can survive the End-of-Life of Windows 10.

Most work was done/recommended for Enterprises by Microsoft.
I only added:

• NextDNS as the default-deny domain blocker, which is a nice addition to Microsoft Defender Network Protection.
• Blocking Console Window Host (conhost.exe) on the kernel level, which can effectively blind the attackers at the post-exploitation stage.

 

[Andy Ful]

@Andy Ful

Better protection (free) against zero-day vulnerabilities could be achieved with 0Patch:

Long Live Windows 10 - 0patch

Pricing and Plans - 0patch

P.S.

As you know, I wouldn't use my PC exclusively for online banking.

Yes, 0patch can be considered in the case of some kernel exploits.
Using it for all exploits would be rather impossible on the computer of a friend.