Um, so "installing compromised executable on desktop PC" isn't in the threat model for these folks?? For sure I wouldn't install a downloaded game mod (or...a

Um, so "installing compromised executable on desktop PC" isn't in the threat model for these folks?? For sure I wouldn't install a downloaded game mod (or...a game) on a PC with access to anything, but come on -- the probability that some user is going to install some compromised application, or view some video that has an exploit for the video codec, is 1.0. So you can't design a system that depends on that probability being 0.0