I can't say if the infections themselves are real or staged, but they clearly and explicitly set the OS up for failure: they give it a public internet IP, enable file sharing, RDP, remote assistance, then disable the firewall for good measures. No modern OS would fare better in those circumstances.
[0] https://www.youtube.com/watch?v=6uSVVCmOH5w
[1] https://www.xda-developers.com/connected-windows-xp-internet...