> Seriously, what do you recommend instead?
1) use an ad blocker and a script blocker when using the web
2) don’t open attachments from people you don’t know
3) stay away from porn sites
The same old rules that kept smart users safe on the web for the past 20 years are still good today.
Those are excellent rules; I have used them myself to good effect. And in my comments over the past years here, you'll see that I've recommended those rules, especially to those folks who prefer to not install updates. There's no law saying you have to do anything regarding updates, but prudence dictates caution if one chooses to operate with compromised security.
The larger issue is that a ton of Windows users: