At some point, infosec lies on user education. No arguing about this. But the exact point is open to argument.<p>Software need an interfaces that reflect intent - if your browser dumps stuff from unrelated places at the same folder, and then the OS uses those unrelated stuff as if it was related, there&#x27;s a completely failure from the software data to reflect the user intent. This is a blatant fault of the software stack (but of no party in particular).