Easy fix
Start moving away from Windows and Microsoft products in general.
The threat level is now so high (and the evidence so compelling) that it's worth the investment to change.
Two flaws in Microsoft software are under attack on systems that haven't been patched by admins. Redmond issued fixes for the vulnerabilities – one affecting Visual Studio and the other the Win32k subsystem – in April and May, but in separate reports this week, security researchers with Varonis Threat Labs and Numen Cyber …
It wouldn’t matter if they rewrote most of the kernel and system services in pure Rust as they keep integrating obviously bad ideas into key areas of their OS. Active Desktop looks positively pristine compared to the recent abominations added to the taskbar, Lock Screen, Start Menu and other key areas of the default shell.