gdsports:
Consider using a raspberry pi or clone. But it must have at least 1 host port and at least 1 gadget port.It should protect your PC from USB port killers, rubber ducky attacks, autoexec issues, etc. But filtering out malicious software is very difficult.
I guess raspberry pi can be hacked as usual PC since it has os or it should be configured very sophistically. But in this case there are some advantages with the exception of the price. For e.g. it is possible to use some online file checker (virustotal) to make protection more advanced rather than just checking file extension and headers.