I thought Win98 is very secure because nobody uses it, and therefore new viruses/malware will not run on Win98.
If you see it that way, Win98 is even safer than XP

. But the problem is that there might still be some viruses out there that can infiltrate such a system. Also, there is almost no up to date security software that still runs on 98. IMHO, I would upgrade.