It wasn't really until Windows 7 that Windows was to some degree secure as an internet-capable platform. XP was just terrible from a security standpoint until SP2 (2 years after launch), which at least added a decent firewall that was enabled by default.