If Joe Average can print paper bitcoin wallets with a secure website (e.g. one that generates them with javascript while the internet is unplugged) and he stores all his bitcoins on paper wallets, broken down into convenient denominations, and spends them by typing private keys directly into websites, he should never have to worry about malware stealing his coins.