That's the thing though. How do you avoid these attacks while simultaneously avoiding things like Pluton?

Yes, it doesn't seem to do the bad stuff outside of Windows currently. But it's only a matter of time.