I got mine on a reduced privilege User Windows account, Installed Firefox, saved passwords to profile with sync to phones, Installed uBlock Origin extension for FF, hid all extensions so they can’t disable, I also wrote a DOS script to nuke all system caches/history on reboot. Not a peep from them in over a year. If they hit a website with a popup, I’ll just tell them it’s a virus and do something else. It’s never an important site that ever has popups.