I think the emphasis is supposed to be on the ‘should’. That is, it’s not in the user’s rational interests to run such software. Hence the locked down security model all the platforms are moving toward.