You don't have to know anything about malware to setup a limited user account and have a nice policy... maybe setup something like tripwire while you're at it. Anyone with a web browser could find something wrong with with web applications and fix it. You could forget everything you ever knew about computers today and start fuzzing programs tomarrow.