Turn the thing loose and have it ferret out all the vulnerabilities and plug them.
Of course, that might brick all the Windows machines out there.
Who gets to know about all the vulnerabilities. Also, no machine/operating system is safe at this point.
No machine is 100% safe. But Windows machines are by far the most vulnerable as long as they allow unprivileged users to run executables and/or allow for installation of blobs from unvetted sources.