I'm pretty sure that's not the only alternative... some others include a Chromebook, an iPad, a MacBook, or even installing a Linux distro and setting it up for them such that they don't need to use the CLI to accomplish the things they want to do.
But honestly, my opinion is that Windows 10 is not as fragile as earlier versions of Windows were.
If the parents' problem is that they install random software, that's not going to help them. I have seen MacBooks with twenty spyware browser extensions.
I really doubt that, but I can't easily argue with an anecdote, so sure. It happened, probably 15 years ago.
Windows was famous for tons of installers bundling toolbars, but that's never been an epidemic on Mac.
These days, Macs will not install unsigned software by default, and you can lock that down to App Store only with a single setting change, so they're certainly not getting bundled malicious toolbars from installing software... since distributing malware is a quick way to get your developer signature revoked, and you're certainly not going to be installing toolbars from the App Store sandbox.
That leaves manually installing malicious toolbars through the official extension store for whatever browser they use. All extension stores do their best to weed out malicious extensions these days, and it takes intentional effort to install extensions. It doesn't just happen while you're trying to do other things.
Obviously, toolbars don't even exist on iPads, and software installers bundling random malware is obviously not a huge concern on Chromebooks. A MacBook was not at the front of my list, so I don't know why you chose to singularly attack that option. Maybe you thought it was the easiest target?
But I don't think "it just happens" on windows either (outside of OEM crapware, which granted is pure dirt). Most of the time it is unsophisticated users led to click and install things themselves. An application signature won't help.
if the OS won't let the user install the malware, that's the end of the line.
As I said in my original comment, I don't think Windows 10 is as fragile as earlier versions. A large part of this is the additional enforcement around application signing, even though it isn't as strong as what macOS does by default.
In earlier versions of Windows, it absolutely did "just happen" from a non-technical user's point of view. Linux, macOS, and (to a slightly lesser extent) Windows 10 do not allow it to "just happen".
>if the OS won't let the user install the malware, that's the end of the line.
except there's no definitive, 100% foolproof way to identify something as malware v. not-malware. If you put a bunch of dialogs in front of something, the site will just include a for-dummies illustration of what to click to allow the install. This will especially be the case if doing so is a prerequisite for receiving the new emoji pack, or whatever else it is that the people have been promised on the other side of those clicks.
We've been through this song and dance enough times that it's not a question of whether this will happen or whether users will fall for it. It's clear that it will and they will. Users do not read dialog boxes, they interpret them as noise and click through them. Operating systems can only protect the user from themselves up to a certain point, at least while retaining the ability to install third-party software.
My mom's computer(s) have been running Linux for probably 10 years now. This has kept her reasonably safe (especially as contrasted with my dad, who insists on Windows), but one time I went over to find some PDF injector-thing installed as a Chrome extension. From her POV, this "just happened".
While using a less-targeted platform helps a lot, online malfeasance is not a platform-specific problem. Pretending otherwise is kidding ourselves. Vigilance is always needed.
I.e. a content consumption tool, not a general-purpose computer.
> a MacBook
Fine if you can afford it.
> or even installing a Linux distro and setting it up for them such that they don't need to use the CLI to accomplish the things they want to do.
That's... possible, but tough. As someone who switched from Windows to Linux many years ago, I still see every distribution to be "leaking" the fact that it's a CLI-oriented ecosystem. They do that that especially when someone goes wrong.
All are valid alternatives if you carefully consider your parents' needs and discover they're extremely limited. But Windows would still be my first, default choice - because of a combination of its design and history, it's the cheapest commercial system that still lets you own your computing experience, and run professional software.
Most Chromebooks have Android applications now. So it's more like a browser and a tablet on steroids. Many newer ones (even cheap) have Linux support.
But of course as you said it's a game of trade offs. My father was using Windows years ago and because of constant service needs I set up Linux for him. It was easier for me to service it remotely. It was better, but far from perfect. Later on I bought him a new computer that had a Windows license, so with upgrade to Windows 10 I thought that it would be ok. My father wanted Linux back after a month or so. With newer distribution and newer computer it was much better than previously. Now it's pretty alright.
However I still think of something a bit more like ChromeOS. Then it would be quite maintaince free. Not Gallium, but a full distribution with same update model as ChromeOS.
But honestly, my opinion is that Windows 10 is not as fragile as earlier versions of Windows were.