so how do you keep malware from running on it?

And don’t say “be careful about what you click on” the days of having to be tricked into clicking on things to get infected are long gone. Yes, linux machines CAN and do get malware