Running /any/ OS that doesn't get security updates is a terrible idea. It isn't about going to safe websites. Your machine has vulnerabilities that can be exploited transparently, without your knowledge, and automatically while it's up.
In the old days, you'd get a virus that's job was to cause hassle and annoy you. Maybe pop up ads. That's not what happens these days.
Most likely the hack will try it's best to be invisible and transparent. It will turn your machine into a zombie bot, doing dirty work for them. Maybe it's as simple as trying to mine bitcoins and all you lose is power. Maybe they use your machine to send spam emails, or to mount a hack attack on other machines, or to do something really illegal. Maybe it uses the compromised machine to access other machines on your network.
This isn't some kid somewhere targeting you. This is all automated, with other machines scanning and checking, and you can bet finding, vulnerable machines.
At the least your machine may run slow. At the worst, depending on your jurisdiction, you may be noted and monitored by authorities, and possibly get in trouble for being irresponsible.
If you can't afford a car good enough to go on the highway, you shouldn't drive on the highway. If you can't afford a machine safe to use on the internet, you shouldn't use it on the internet. Unplug it and use it standalone, or move to a free platform like Linux. As a long-term linux user, I'm the first to say that the usability is ****, it's buggy, and it's a problem. But it's gotten better for non-tech types in recent years. And maybe a few evenings learning something, just maybe, is preferable to some of the alternatives I spelled out.
