Most people surfing on their own PC will be logged on as the Administrator, hence any malware that gets in does so with the freedom of an Administrator. For those folk who are particularly concerned about PC security might like to think about creating a non-admin, limited account for surfing purposes.