Erynar: After it went EOL, Microsoft has only fixed security issues for XP in extreme circumstances.
Any OS that doesn't get regular security updates is increasingly at risk of being infected with something, because the more time that passes, the more unpatched vulnerabilities are found. The risk is of course much lower for Windows 7 now than it will be later, and good computing practices can reduce the risk, but they can't eliminate it.
There is never zero risk, outdated OS or not. Of course it's up to the users to keep track of known vulnerabilities and act accordingly. It should be this way regardless if the OS is old or not, because 0-day exploits can always happen. The only difference is that those "holes" will be fixed on a current OS eventually, on an outdated one possibly never by the manufacturer.
I'd say someone who consciously decided to stay with an old OS and is aware of the responsibility that brings is potentially safer than the average user who doesn't care and relies on not being hit in the time between the exploit and the patch - which is a pure game of luck.
And even with the patching - considering the sometimes abysmal quality of MS' patches in the last few years, which you often even can't prevent from installing - it's sometimes even better to not update. See
https://www.forbes.com/sites/gordonkelly/2020/02/19/new-windows-10-update-starts-causing-serious-problems/ - and that is not the first time a "security updates" hides, removes or outright deleted users' files. You really want to say this is "safer" than using Win7? When forced updates potentially destroy your data?
As I wrote, I work in IT, and we have Windows 10 at work. My machine is set to postpone updates as far as possible, but every time a bigger Win10 update is out there is at least one of my colleagues' machines that makes trouble. From "death after reboot" (OS destroyed...) to data loss to annoyance like missing programs we use, deactivated or missing services of our GIS - you name it.
The same goes for Visual Studio, which is actually an amazing development environment - but every third or fourth update breaks something (at least you aren't forced to install them, so usually one of us tries it for a few days, then either greenlights it to the rest - or not).
Erynar: If you want to run an unsupported OS and take the risks that go with that, that's your prerogative, but ultimately, you're just asking for trouble, and don't expect anyone developing software to spend the time and resources required to make sure that their software runs on your outdated setup.
It's up to the developers to decide if the market share of an old OS is worth the trouble. As I wrote above, using Win10 in the current state of MS' QA is also "asking for trouble". It's astounding how a company like that can become this unprofessional.