It's a very forced comparison trying to swap in the web's security model, where one runs untrusted code from arbitrary third parties automatically, for a personal desktop computer context where a single user is in complete control.