>Nowadays, everything is behind NAT and there aren't any infected Windows XP machines
All end-user PCs have been behind NAT since the late 90s unless the system was a dialup straggler. Enterprise users raw-dogging the internet only have themselves to blame.