> I am scared for my parents to get exposed to this kind of thing

It's tough. One option is to hope/assume that exploits only compromise user accounts rather than the whole computer.

In that case you can blacklist the banking website from the day-to-day browser as a reminder to switch to the other account, and configure the other account's browser so that it can do little else.