People must learn to speak to management eye-to-eye.
Say: "I did so and so over the last few months and I believe I've earned my month-long vacation"
Or: "I'll gladly work more than 40 hours a week when necessary - but I do like coming to the office later than most"

You should develop a straight forward, explicit business relationship with your boss. If you act like a kid, you deserve to be treated like one.

Now, if you feel you don't have any leverage to negotiate, it might be time to look for a new job!

I've been using computers for 20 years and have never been infected. Could someone please explain how exactly does it happen? Do people click on those "You've won!" pop-ups, then proceed to download and run some executable?

I think the absolute value of their compensation is also a problem. If you make $500k a year, getting that extra $500k bonus is a pretty big deal. Maybe you can finally buy that yatch, or retire a bit earlier. But if you made 150 Million last year, does this year's bonus it really matter anymore? What exactly it the "risk" for those people?