I don't do any of the above! I lock it, keep it up to date and are not foolish about what to run/download.