I recommend  using Linux for any PC running a  full node, Linux is much more secure than windows.

The safe way of doing this is to create a special account for the node, and make sure that wallet.dat can only be read by the owner, not others, not the group, only the owner of the account.

Then create a separate account for your regular usage, that way in the event that you do get a virus, the virus would run under the ownership of the account that got the virus, and not under the ownership of the account that runs the full node, this way your bitcoins, litecoins, dash, etc they will be safe.

For extra security Trezor and Ledger Nano S are the best.

Both are great hardware wallets, and both have features that are missing on the other wallet, trezor has support for a password manager, and ledger has support for litecoins.

I recommend to have both, for traveling by plane the Ledger has the advantage that looks like a usb stick.