- First, the computer need to be clean of all hardware backdoor
- A clean OS such as Windows 10 need to be install
- It need to have the system file lock to everybody but the OS itself
- The OS need to only give access to the installed programs to their own dir and memory
- And a firewall such as Glasswire in better is a must
- Plus an anti-virus with a database and a SecuRex scanner
The line 4 is important to understand. Of course, some programs would require root or sub level root to work correctly. But most programs and games does not need more than access to own memory and dir.
Finally, the OS need to come with a strong priority task manager to hard close some programs that could have problems. And a startup manager such as msconfig. And maybe some more that I'm not aware for now(I'm alone).
Ho and, keep your auto OS update. A OS update need to be verified.