When I run Windows these days, I assume every single part of it is compromised, either by scummy third party software running in the background or by Microsoft's scummy software running in the background. This includes cameras, microphones, any radio, the networking stack, any drives (local or network) the machine can so much as ping, everything. I have a special vlan prison I put my Windows machines in because I treat them like the hostile attackers they are.
Say what you will about Apple's "walled gardens" but every time a frustrated 3rd party developer complains online that they can't do X, Y, or Z on Macs because of permissions or security, I get a little more comforted that my Mac's software is not constantly attacking me.