If you're seriously concerned about security, you don't run Windows. Period. However, most people make the choice to run Windows anyway. Some based on a feeling that they can secure it adequately, others due to plain ignorance (they don't even realize there is a threat). There is an entire high-dollar industry built around selling you stuff to "protect" your Windows computer. Everyone is allowed to make their own choices and live with the consequences of their choices. To each their own. Live and let live. Run the operating system of your choice.

As far as older WindowsXP inbedded in ATM's and other stuff, there's not much you can do to protect yourself there except to not use ATM's and other stuff when they become unsecure. I do not know if they have reached that point yet, of when they may reach that point.