I have no problem running XP with an administrator account. You just have to pay attention, as most people will click on advertisements/attachments (email)/etc which is a bad thing.
I suggest you look up "drive-by download". Attention and common sense are always vital for security, but they don't stand a chance against malware exploiting software bugs that don't require user interaction.
