All I can say is that I somehow picked up very ugly viruses on two separate occassions without engaging in any obviously unsafe Internet practices. (I suspect one was picked up from Facebook. The other one started immediately after I tried to update iTunes.)
I picked these up even though I was running up-to-date virus protection (WebRoot).
These viruses required completely rebuilding my machine which meant reinstalling all software and drivers, reconfiguring everything, and going through enormous pain to get back to where I was. I lost all my Melodyne edits on an album when I reinstalled Melodyne. The V-Studio interface set-up was completely wrecked and it took some time to get that right. It was ten days before I was operating, and it was only weeks later that I finally got the last of the VSTs reinstalled and back as they were. A lot of project work had to be redone.
I now connect my music PC to the Internet only to download, authorize, or update music software or to publish music to the Internet. I bought the cheapest laptop I could find at BestBuy ($400) for email, Facebook, iTunes/etc. and I use either the laptop or an iPhone for all non-music Internet stuff.
It's up to you, but that is my experience.