Better: use Qubes OS (or similar).
There is no reason why a compromised entertainment system should have even been able to compromise that dev environment. None at all.
Discussion
That’s true but you still need to update periodically. Nothing will save you from running a 3 year old version of software with multiple CVEs