Real 1337 People Only Need This For Anti Virus

Will not prevent from stupidty.
Good rootkits bring their own environment.

You have a point, there is always the possibility of social engineering attacks, so never give any credentials, if the user does give credentials, they can trick the company into giving other credentials ...

It's not just a point, it's experience.
If i tell you the password of a wi-fi router, one of my former customers installed by himself
in the companies inner network behind the firewall .. you secretly know, it doesn't need a social engineering attack. And just to mention it: 10 years earlier, the very same person got his network hacked because he couldn't leave his fingers off of the firewall.
Social engineering ....

Some never learn. Well, the mentioned person learned lately, as it was too late.

A study from the beginning og the 21 century said:
80% of all network based infections happen from inside out because some
uneducated person opened a "facebook" link which was a phi(nni)shing mail or just
handed over through a chat application.
Which also sais: that person didn't worked at the time of the event.