I second the Linux recommendation. KDE has a desktop lockdown mode, and if that is not enough there is also a kiosk mode. It's better than foolproof - it is absolutely designed to enable secure, limited access to specific applications.