I wouldn't trust Yandex for anything political, but for other information it should be fine. As for malware, not downloading and running random executables is going to already be sufficient for preventing infection, and disabling JS by default will catch the rest of exploits --- especially those that try to obfuscate their presence.