Although this might change going forward, right now the web installer is the only option. I agree with your preference for installing virus and firewall protection before connecting to the internet but if it is any consolation I have installed One Care close to 100 times over two years without incident.