3) I use out of date hardware and software as much as possible, being rigorously paranoid to never expose it to anything risky, and keep it locked down as much as possible. (Which means little Internet use... which is arguably a feature of the process.)

If the manufacturer doesn't support the software anymore (or better yet, is out of business) the odds of malicious updates go way down.