[mabbo]

This is one of the places where ChromeOS is an interesting option. If the employee literally can't install software, it's very hard to get owned by malware.