This fear is way overblown - at least for the basic operating system. Web apps are much more risky. Sandbox them thoroughly.