I use Windows 10 with a relatively obscure firewall software with a per-process/per-service whitelist, and try to not be stupid on the Internet. I also do regular backups. This should cover most of the risk model applicable to me. Has worked so far.

I don't suppose that you can share the setup with us? What firewall, how are the backups performed, how regular etc.