If the machine is properly firewalled off, and only accessing the internet using apps which are up-to-date, I think the realistic risk is pretty minimal.