[shipwright]

We have a machine running Win7 that's just about that age at home, mostly for the sake of keeping old passion projects that rely on heap behavior being deterministic like some forensics plugins and a half baked try at application checkpointing for Windows- despite that meaning a wider attack surface for Win7 (like LFH buffer overflows or use-after-frees), there aren't that many major threats to be wary of especially if an eye is kept at ProcMon then and now, plus maybe a network packet analysis tool of choice with some rules on (anecdotally, said workstation still sees reckless unprotected use from relatives and it's just fine haha). XP on the other hand needs more precaution and it might be better off kept offline or replaced with a lightweight Linux distro like Lubuntu :)