With 10.4.1, Safari will now warn you that you're downloading a widget, and no longer autoinstalls them either. For me, that's enough, since I actually pay attention to what the dialogs say. 10.4.2, however, increases this even further by offering a protected area to test widgets in and a manager to delete widgets. So after that update is released, there should really be nothing to worry about.