Why? I have a Windows XP laptop online only for that exact same use case and I don't do any banking on it, nor am I signed in any accounts whatsoever, so what's

Why? I have a Windows XP laptop online only for that exact same use case and I don't do any banking on it, nor am I signed in any accounts whatsoever, so what's the risk? If some malware were to compromise it somehow, there's absolutely no credentials or valuable info on there to steal or encrypt for ransom, and the machine is on it's own VLAN, so if it were to hypothetically get infected with something, the malware has nowhere else to pivot in my network just in case someone made some ultra-specific malware that can target both Windows XP machines and Amazon Alexa devices together as if I'm running Iranian nuclear centrifuges or something and have state actors targeting me. Plus, is there any Windows XP malware still circulating in the wild online mainstream? Feels like worrying about catching smallpox today.