Hardware-enforced Stack Protection: https://www.zdnet.com/article/google-chrome-this-new-feature...
Significant improvements to ASLR starting in Windows 8: https://msrc-blog.microsoft.com/2013/12/11/software-defense-...
And many more things. New Windows releases aren't just coats of paint.
Guarding one protects the other.
Need to do those in different ways at different times.
We still have to keep a couple winxp and nt boxes alive at work for diagnostic gear (none are online). Thankfully not my job as I am obviously a risk :)
Windows 10 was technically vulnerable, but since Windows 10 has drastically better security features, from a defense-in-depth standpoint, having Windows 10 more or less rendered most computers immune in practice. (Likely, the few 10 machines infected were intentionally crippled by their admins.)
Bear in mind, Windows 7 is an OS from 2009, 12 years ago. It's ancient from a computer security standpoint.
Whether you are personal or corporate, you probably should be running either Windows 10, or choose an alternate operating system entirely like OS X or Linux.
I ask as even at home, my different devices all use the same browser/extensions, VPN and browsing habits. I use established FOSS where possible and the only problems I have had since Windows 98 are from data breaches (nothing I could have prevented with different OS/software).
Or are we talking about business/corp usage?