> I don't personally use AVs but they're useful for people who cannot be taught security. Attackers agree. Even outside of the context of remotely exploitable

> I don't personally use AVs but they're useful for people who cannot be taught security. Attackers agree. Even outside of the context of remotely exploitable ring-0 vulnerabilities that require no user interaction, they provide people with a false sense of security. > Such vulns are relatively rare compared to the things they run into multiple times a day. That's because criminals are fat and happy with lower hanging fruit. Why bother exploiting AV software when you can just trick people and the AV software is already ineffective at stopping e.g. ransomware?