I agree the blame is misplaced. Browsers should do a better job at highlighting scammy sites. There is a counter-argument on http://www.thewhir.com/blog/web-encryption-needs-the-freedom...