If a legacy app requires Windows 7 Home Basic, use a properly licensed volume license copy with no internet access (air-gapped) and strict endpoint protection.
