you live in NEVER NEVER Land
I agree with #6 and #8. A typical everyday user can and will infect a windows based computer with ANY browser. If you choose to do #2 - you will upset your users to the point that they will think about choosing a new contractor. - Good one Jeff!