This comment demonstrates a misunderstanding of the problem. The problem probably isn't that the Chinese can trick people into running programs they download. The problem is that your browser has secret, subtle, horrible security vulnerabilities that allow attackers to embed executable code on web pages that will get run without even creating a new process.