Or if a compromised Computer joins your network. Or if someone is able to join your network via your device due to some unknown attack vector. Etc. Etc.
You are still vulnerable to every kind of vulnerability in every program that processes a file you download. Particularly parsers (e.g. XML, images, PDFs,…) tend to have a lot of those over the years.
This feels like it would be dangerous but let’s say you have a good av how bad would it be?
Like if you took a 100% non-vaxed person and sent them on a European brothel tour in 1350.
Still bad, they are running with whatever vulnerabilities existed at the time and all those are known by now.
Way less dangerous than people say.
Unless you do stupid shit like plug in unknown USB sticks or put a public IP on your PC you will be mostly fine.
Or if a compromised Computer joins your network. Or if someone is able to join your network via your device due to some unknown attack vector. Etc. Etc.
If you manage to find an updated browser and don’t host any network service it shouldn’t be too dangerous.
You are still vulnerable to every kind of vulnerability in every program that processes a file you download. Particularly parsers (e.g. XML, images, PDFs,…) tend to have a lot of those over the years.
If he’s checking his bank account on there then you’re still pretty bad. Downloading dubious cracked software is never a good start.