God forbid we hold users responsible for exercising due diligence. No, we must assume everyone is too incompetent to distinguish between shady and legit software.

> No, we must assume everyone is too incompetent to distinguish between shady and legit software.

As someone who has worked retail in the past, and who currently works in IT: starting with this assumption generally minimizes headaches down the road.

There are only so many hours in the day: people learn what they need to get their job done, and tend to move on. Some people are quite dim, but others don't have the time/energy/motivation/need to learn the details.

I think us enthusiasts tend to lose sight of the fact that most people don’t care to learn about how their computers work, just like how most people don’t care to learn about how their cars work.

And pretty much no one understands to any significant depth all or probably even most of the technology they interact with every day.

Every discussion about the average user needs to start with https://xkcd.com/2501 to put yourself in the right mindset.

Proffeshionals can't distinguish vulnerabilities in their own fucking software, so we have no right to blame the users.

First rule of IT club is you DONT TELL AUNT SUSUAN ABOUT THIS METHOD!

It used to be grandma. Because of grandma (and Aunt Susan), future generations of children will never have the freedom we had growing up.

Is not like the Google and Apple stored are not filled with garbage, it was recently revealed that Apple refused to notify the users that got infected from their "safe" store.

About Aunt Susan , you could have the device locked by default and have a more complex process to root the device, like some code/password that is in the box of the device, in that envelope Apple PR team could inform Aunt Susan that she should not do this unless she is tech competent or a communist.