That's fair, but in general I don't think windows is much of a long term option. The main reason IoT has more vulnerabilities is that it has more endpoints, so if you properly secure everything with credential you should in theory have no problems, but it's statistically much much more vulnerable.