You're right, but people complaining shouldn't dictate life. People also complain about being crushed by ransomware. Not to say they don't have a valid point, but the paradigm needs to change.

We used trusted stores for certificates and mobile applications, it's time for the desktop to do the same beyond drivers.

Not to say things won't creep through, but default allow needs to go for this to be truly solved, not a new feature or vendor product.