What can be some preventive measures I can take to avoid these risks?

Avoiding the risk isn’t the only thing you should prepare for in that case, although I think that using common sense should be good enough for most. It’s a case of diminshing returns, and at some point, you’re making things harder for yourself for little actual benefit.

You also want to take steps to make sure that, in the eventuality of getting infected by malware, you have a way to deal with it. Such as keeping separate, disconnected backups that you can replace your machine with, wiping out the infection, or at worst, restore to a new machine if the malware renders it entirely unusable.