CASSIE and Chrome OS
CASSIE will allow you to take control with management features that are easy enough to use for even the smallest library, but powerful enough to satisfy the needs of enterprise customers.
Chrome OS has built-in protections against viruses and malware, and will automatically clear all data from the previous patron between sessions. There are hundreds of policies that are configurable through the Google Admin Console, allowing you to customize and lock down your Chrome OS devices for public lab use.
You can even mix Windows, Mac OS and Chrome OS stations within your CASSIE System, allowing you to offer your patrons a variety of experiences.