It was safer to disable Windows 7 updates in 2016 onwards
Ever since 2016 it is insecure to update Windows 7. Just disable Windows updates and use Chrome and other software. Why? Ever since 2016 Windows updates come with backported spyware, forced upgrade dialogs, slower replacement components to annoy user. Exactly the same happend with Windows XP. It was best to stay with Service Pack 2 and never install SP3 and disable Windows Updates and install selected patches via third party websites that really care about the user and Windows ecosystem. Their evil strategy, again and again.
For the short and mid term Windows 7 64-bit is perfect. No other OS (beside macOS, iOS, Android) is as polished, stable and great to use. For long term a switch to Google Android, Google Magenta or Linux or FreeBSD is inevitable. Win8 and Win10 are a showstopper, loosing control of PC/notebook is a no go. Unfortunately MSFT has their fingers inofficially in Gnome and KDE to sabotage them, so both suck nowadays, KDE 3.5, Unity and Gnome 2 (now Mate) were great. Almost everything is web based anyway, and for the few native applications the hope is the new Google OS "Magenta" destroys Windows one for good.