I think you have far too much faith in the average user. The average user just uses their computer for email, social media, and YouTube. The average user panics when their Google Chrome shortcut disappears from their desktop, because they don’t know how to open it otherwise. The average user doesn’t even know what a botnet is, or why updating would help prevent them.
And the bigger problem is that a compromised device doesn’t only affect the compromised device. It can potentially spread to other devices on a network, steal info from anyone who interacts with the user, or become part of a botnet which is used in attacks elsewhere. Forcing the average user to update is like requiring vaccinations. We do it because it helps protect everyone; not just the one person who was inoculated.
I think you have far too much faith in the average user. The average user just uses their computer for email, social media, and YouTube. The average user panics when their Google Chrome shortcut disappears from their desktop, because they don’t know how to open it otherwise. The average user doesn’t even know what a botnet is, or why updating would help prevent them.
And the bigger problem is that a compromised device doesn’t only affect the compromised device. It can potentially spread to other devices on a network, steal info from anyone who interacts with the user, or become part of a botnet which is used in attacks elsewhere. Forcing the average user to update is like requiring vaccinations. We do it because it helps protect everyone; not just the one person who was inoculated.