If you want a system thats totally locked down and doesn't let you do ANYTHING remotely useful then go buy an iPad.
Else don't go live on the internet when logged on with Administrator privilages. Basic security principles! That way the bad boy dodgy software can't install itself.