I'm surprised it's not already built in. But then again, most attack vectors these days seem to be via online services, a good adblocker, some scriptblocking, and a competent email gateway can solve many of your issues.