Isn’t that what VoodooShield and Sandboxie is for?

Antivirus might be useless, but if it can’t run, then it won’t be able to do anything. VoodooShield blocks almost everything from running. Sandboxie puts your browser or whatever in a sandbox. So if it does run, it’ll be in a sandbox.

Most of my browsing is done from Linux now, there’s a free alternative to Sandboxie for Linux, it’s called Firejail.

Good luck teaching anyone how to use VoodooShield or Sandboxie.