When trying to prevent iBaby from getting installed on Wife 1.0 you MUST take a layered security approach.
1. Install invisible filtering bridge in front of Wife 1.0's gateway.
2. Install Squid proxy on filtering bridge so you can track Wife 1.0's surfing habits.
3. Configure Wife 1.0's firewall to drop ALL PACKETS INCOMING, OUTGOING, AND FORWARDING!
4. Only allow Your IP address INCOMING access to machine running Wife 1.0.
Dropping FORWARDING packets is important, otherwise iBaby might get installed on another machine.