Maybe all of this is true, but it's a different threat model than I'm concerned with. I'm not that worried about malware exploits, I'm far more worried about software behaving "correctly" in a user-hostile manner.