Users sent their tokens to a contract that is less than 24 hours old, with code that had no prior exposure to the market. It does not take an expert to learn that “sending your tokens to random contracts is a high risk activity.” But I will agree that consumer education & protection does need to improve in this space.

FWIW the risk profile is different than interacting with something like WETH contract, which has had an $10+ billion USD open bug bounty for long time frame.[1]

[1] https://etherscan.io/address/0xc02aaa39b223fe8d0a0e5c4f27ead...