If Joe Average can print paper bitcoin wallets with a secure website (e.g. one that generates them with javascript while the internet is unplugged) and he stores all his bitcoins on paper wallets, broken down into convenient denominations, and spends them by typing private keys directly into websites, he should never have to worry about malware stealing his coins.
That seems extremely cumbersome and inefficient, and certainly not for Joe Average. How is hand-typing addresses going to be useful at a grocery store? Or is this just a temporary measure? And is he going to hold all of his money in paper slips? He'll have to print new money every time he gets paid, and how is he going to do that without either a third party or a client hooked up to the internet?
A far better long-term solution is a piece of hardware that acts as a client, imo.