There are lots of people hard at work on security, but does anyone really think about trustworthiness or authenticity w.r.t. websites? It seems to me that doing

There are lots of people hard at work on security, but does anyone really think about trustworthiness or authenticity w.r.t. websites? It seems to me that doing a quick google search for one of these 'elite' sites would turn up a few reviews and complaints of shady business practices, but has anyone put forth any thought on how to alert users that a website may be malicious, even though they aren't a source of malware? ...or is this something that we, as web designers/developers, expect users to be able to do on their own?