You say this only because she hasn’t been ransomwared yet, which is impossible on ChromeOS.
It's not the wild wild West like Windows. There are structural reasons why Linux desktops are less susceptible to malware, as well as the obvious marketshare issue.
More generally, this feels roughly equivalent to saying "it's better to live in a tent than a house, because a house will crush you when an earthquake happens."