I would wager a policy of only installing commercial software from well known vendors has a better success rate.