“I’m just hoping that they manage to make windows less virus-friendly with Win10”
they won’t. the only way to do that is to make all but one login account a “limited” account by default and disallow execution of programs from anywhere but the “program files” and “windows” directories for limited accounts.
It’s pretty easy to do that, so I think the vulnerabilities are deliberate, so that after 3 years or so, it’s cheaper to buy a new PC than repair an OS that’s had 3 years worth of virus accumulation, meaning both Microsoft and the PC vendor’s get to sell new stuff.