Heh, I remember reading about a few of the infamous ones. Most of them seemed generally harmless; I never got one, although if I’d gotten more software from MUGs and mixtape-style floppies, I might have.

You are definitely correct about loose OS security. It was possible to do a lot of damage with just a HyperCard stack, and those were pretty widely distributed.