The problem is that we currently rely on user discretion. Users are really bad at preventing malware from infecting their system. We can do some things, sure -

The problem is that we currently rely on user discretion. Users are really bad at preventing malware from infecting their system. We can do some things, sure -- sandboxing by default, etc. But when it comes down to it, if the user is able to click an 'allow access to my banking information' button, then that user will be getting screwed. The only response I can think of is taking that power out of the hands of the user, and putting everyone in a walled garden. That is something that I find distasteful. Is there a solution that leaves users in power over their own computers? I don't know.