I can see your point, but think of it this way: No amount of security can protect against human stupidity. If I accidentally download and run an unknown applica

I can see your point, but think of it this way: No amount of security can protect against human stupidity. If I accidentally download and run an unknown application, and it asks for root privileges and I grant them, then if anything bad happens, I really can't blame the system. The system did exactly what it was supposed to do, it required the user to confirm the operation by entering the root username and password and if I did that then I explicitly granted this process to run as root. Same goes for surfing under an administrator account on Windows. Most malware these days is not successful because of their ingenious design (although there are such examples) but because they employed a successful social engineering tactic. I do agree that we should strive to create more secure systems, but I think that you can only go so far with that. In the end, users need to be educated not to grant root privileges to strange apps they just downloaded from the web or open weird-looking attachments they receive in their e-mail (even if the message seems to be coming from their friends). My point is that people should have the same amount of healthy cautiosness when surfing the web or handling unknown data storage as they generally have in their day-to-day lives.