I run a security program called Comodo Internet Security on Windows 7 (admin). It have a feature that blocks all new software from starting, downloading to accessing the filesystems important folders and files. It also blocks software from accessing internet. It can be a bit dialog heavy until you have set it up. It is a good software when you have configured it properly. Have never had anyone break in via internet nor any malicious software issues. Although Ive got common sense when it comes to what is safe to download but still I like Comodo (most of the time).

When the OS cant deliver you can find software that do. So why the whining about the OS security? For example the first thing I install is a proper Firewall >with advanced configuration control<.

Comodo even stopped the malicious Windows 10 update with malicious dialog design hiding how to close it and a delay timer so it can start the update without user consent. Comodo is not supposed to stop updates to but my configuration must have been why it did. And we all know that malicious updateS liked to remove personal files and software installed by the user. Im thankful for comodo. I later disabled the malicious updateS (since there were many attempts to make it run, they changed the update name several times). Nasty and malicious indeed.