You’d be protected from this particular exploit if you used a package manager rather than the updater, though of course you’d still be vulnerable to the installer binary itself getting compromised.

KDE's own kate is a good alternative, and available for install via chocolatey.

Gedit is an underrated alternative imo.