People are surprised that they never get malware on iPads. If they didn’t use Windows on their computer, they’d accomplish the same thing. Probably not with macOS, but maybe with Linux, if you know what you are doing.
Or use Sandboxie. I’m to lazy to install it in my VM. I had it, but did a clean install. I use Firejail in Linux, which may or may not be needed.
Use random passwords, and limit what the other users on your computer can do. You can accomplish that in Windows too. Guess most people are to lazy. I’d run an OS in a VM if somebody else used my computer, the VM is for them.