Well Max, I cannot make any recommendations as to how to set the security for another computer up. Once I do that, HTC becomes responsible and I have to support it. I walk the line just making general statements about it.
Most people would hate the way I would setup thier computers. For me though, it is a good trade-off. I do not have to run any anti-virus, anti-spyware, or firewall software. I do not have to worry about getting something bad in my computer, then spending days on end fixing it.
When I want to use my computer for a task, I know I will be able to and not have it bogged down with all the extraneous stuff others add to thier computer in the mere hope of staving off the onslaught.
The trade-off being it takes a discipline to use a computer setup in this manner. I cannot go to places like Youtoob, simply due to the fact I refuse to enable ActiveX and/or Java, and I refuse to put Youtoob in my trusted zone.. Any site which allows anyone to upload data to it is a big security risk. And that is just one example of places anyone should avoid, if they want to keep thier computer free of stuff which can hace a negative impact on the operation of the system.