You seem to totally ignore historical data - i.e. you install software that had 300 vulnerabilities last year, then assume it will get hacked. Restricting yours

You seem to totally ignore historical data - i.e. you install software that had 300 vulnerabilities last year, then assume it will get hacked. Restricting yourself to software with, say, at most one vulnerability in the last five years helps a lot. (Yes, I know this can be "impractical". But then you deserve what you get.)