But what do you want to ensure: that grandma only installs malware on her phone via mistakes she is individually responsible for, or that she doesn't install malware on her phone? Maybe for the abstract 'grandma' you would take the first option. But for someone you personally care about, you're not going to choose the option that predictably ends with her being harmed, even if it will be her own fault when it happens.