This is pretty remarkable given that my dad only uses it watch golf videos and edit some photos in lightroom. He may occasionally indulge in some porn cough.
I figured he'd be relatively safe as I installed an Adblocker and had Norton installed on the device but I did not realise how vulnerable he was until I found out he can't tell the difference between a pop up and a genuine desktop notification. He has even clicked through on a "You have been chosen to win an iPhone 7" link recently - he saw no harm in at least seeing what might happen.
He also likes to download videos from youtube so I taught him how to use youtube-dl but ended up downloading some malware-infected ripper because it had a more convenient UI.
How do I educate someone from such a base level?
What can I put on the PC to protect them? I avoided using scriptblockers as I don't think they are tech savvy enough to work out why a page might not be working.