We had people install a thing from whichever site they found, often with a toxic payload because third-party sites gamed results to end up above a company, or via sites that started trusted but were taken over by scamware, and then never updated anything, falling prey to whatever virii were doing the rounds.