The problem is the false positive rate. It's like strict parents and car alarms. Car alarms go off without good reason all the time, they're ubiquitous and thus

The problem is the false positive rate. It's like strict parents and car alarms. Car alarms go off without good reason all the time, they're ubiquitous and thus almost completely useless. When was the last time you heard a car alarm and investigated whether a car theft was in progress? Similarly, a parent which tells their kids that pot will kill them instantly, prevent teenagers from watching PG movies, and so on is more likely to have their advice completely ignored when there is an opportunity to do so. And then you end up with kids who get into oxycodone, binge drink, and have unprotected sex. The strictness of browser security is pretty ridiculous and not very helpful to the end user. If I go to google news on my phone I get half a dozen messages about certificate mismatches, which I have to dismiss individually. It's a dumb system with even worst UI. Except the UI is the foundation on which a sense of trust or alarm is built.