Firewall. You can set up a firewall to not allow connection to the net by vulnerable machines, while allowing others to connect. I know little about Windows firewalls so you will have to brush up your Windows 10 firewall kung fu to do this. I can set up Linux to allow a machine, say a Windows 7 machine to be accessible by only a known machine which can be handy but don't know how to do that with Windows. That means no access from the net is possible for the Windows 7 machine that is not a privileged machine.