Consider Chromebooks - one can unlock ChromeOS or replace it with Linux, but Google made it rather scary-sounding process for an average user, so malware site has very little chances to convenience the user to do it.