It's very simple really; just don't run any external programs. Better still would be to limit the permissions of each specific executable (like iOS does), but t

It's very simple really; just don't run any external programs. Better still would be to limit the permissions of each specific executable (like iOS does), but that's not how Windows was designed...