I assume this is about home user PC's? Because companies mostly get infected via exploits in corporate software running on servers, not by downloading apps, from what I understood.