[danielweber]

At a high level, Windows and OSX share the same general security architecture: most stuff happens as a user, with root called in when necessary.

The single best advice to not getting infected is to not do stupid stuff.