Another good strategy would be ... to use Windows as the very-secure operating system

that it is
capable of being!
It really comes down to this:
- Don't use your system either as an "Administrator" or as a "Power User."
- Do use meaningful passwords.
- If you aren't running a version of Windows that has these tools, "go buy a real version of Windows" that does. Do not rely upon the pre-installed OEM version of Windows that probably came with your machine.
- Learn about Microsoft Backup and use it. Set it up to run automatically.
- Remove every scrap of "anti virus" software from your box. Turn off the "Security Center." (Not only does it do no good whatsoever for you, but it's a gigantic hole.)
If you have applications that you need, that need Windows, then you need Windows (on that box...) in order to run those applications. It is a
huge waste of time to "try to get it to work," even if you "succeed" in doing so. Hardware is dirt-cheap. You can afford to have more than one box, each one devoted to whatever is its particular purpose and configured accordingly.