I always tell people the best antimalware is a good adblocker. It's a requirement I make for company machines as well (not really enforced but I wish I could).