> I shouldn’t need a separate machine/boot just to play games with friends

Yet here we are... It's not safe to trust a modern rootkitted Windows gaming setup with sensitive personal stuff and will become less so moving forward.

Your best bet is treating it like a console and do your real computing elsewhere.