I used the email analogy cause I figured that would be more obvious for people to recognize the security risk... it's hard to explain things like drive-by downloading for non-techy people.