The best thing I ever found to reduce the risk of malware is to move them to a Linux distro. The risk is not zero but from a user perspective I install the software they need from package repositories remotely, and that more or less settles it.
Of course this is not for everyone, but for folks who for the most only need a browser a Linux distro is a good choice.
Of course this is not for everyone, but for folks who for the most only need a browser a Linux distro is a good choice.