It's safe to say that even if you get an older computer, that there is likely an exploit for it. Basically comes down to who do you want watching you. Russia/China or America/Canada/Corporations.

If your really concerned about protecting personal documents, best to just keep them on a computer not connected to the internet. Although that wouldnt deter someone who was dedicated enough.