Which is probably what the average user does, if I extrapolate the data from friends and family.

Installing adware with security updates is just so wrong on several points. It is difficult enough to get non-techies to install security updates and now you additionally have to teach them to watch out for crapware that someone sneaks in there.

I'm choosing C# over Java whenever I can, just because of the ask.com toolbar, seriously I find it that annoying.