simply keep everything up to date, don't install shady stuff, and don't use insecure passwords

ssh isn't really a security issue as long as you have either a good password or key based authentication

running outdated versions of systems can pose a risk of being compromised but the chance of that is much less likely than you download something bad, but avoiding out of date windows is easy