Running hot wallets on Windows is sub optimal. Linux is best and its ideal to have a machine that does nothing else except host your hot wallet, that you never visit websites on etc.

Raspberry Pis are cheap and can run most coins with some external storage. Here are some things to do:
Compile the wallet from source code; block all un-needed incoming ports with a firewall like UFW; if you will use SSH change the default port away from 22; change the user account and login to complex strings; encrypt the wallet.dat with another complex passphrase; make a wallet backup on another device; use rng-tools to enable the hardware random number generator for improved entropy; keep the OS updated; use fial2ban to prevent login dictionary attacks.