> in a few months time it might be too much of a risk to have an XP machine with internet access.

It's been too much of a risk for several years now. If security is truly a deep concern of your, you wouldn't still be running XP.