Ha, no it is not. As someone who worked many years in the industry, nothing is really secure but also nothing is really attacked in that way anymore. (Unless you think people are going around warwalking looking for vulnerabilities in private networks). There are are still many networked devices running old windows even now (in some really sensitive areas as well). The constant fear mongering about security updates from Microsoft being anything but too little/too late is just crap talk to keep people employed.

The main risk currently is social engineering, to a degree that (outside major nations/companies) the other attack vectors are a rounding error. You and anyone else worth less then a few millions best approach to online security is to back up often, change passwords often, and don’t click links in emails.