How should I connect a windows qube to the internet securely

I’m so lost right now… I remember for sure that I read somewhere that I should clone sys-firewall(or sys-whonix) because there’s something insecure in how windows operates or something like that and if not cloned it will make the netVM not secure, but I don’t remember where I read that.
I didn’t find it in here

or here

Can someone please point me in the right direction?
I eventually want to connect the windows qube to an internet as anonymously as possible just to update it.

I think you are thinking of this
The change in arp settings may result in information leaks. That’s why
you may want to have a distinct Whonix gateway for this purpose.

No I didn’t read these docs at all! It was something regarding QWT or windows qube here in the forum or more probably somewhere in the qubes’ docs

So are you saying I can connect directly my WindowsNew to sys-firewall and it’s completely safe? Or should I do something???

That’s likely the source, cited here in the Forum.

I think you missed my previous question

You are likely referring to the warning box in

Windows qubes — Qubes OS Documentation

Recently added via Add security warning for Windows VMs by Atrate · Pull Request #1638 · QubesOS/qubes-doc · GitHub