Absolutely not. Windows 7 may still function, but it is a target for unpatched vulnerabilities. Attackers are actively seeking windows 7 hosts for remote code exploits, lateral movement, and privilege escalation.

Do not run Windows 7. Stop running Windows 10 after the end of life date next year.

Actual budget with simple fin for bank links. Currently hosted on pikapods, will move to self hosting on prem at some point.

Yep. This exactly.