Fending off malware shouldn’t be your full-time job