I think this security model requires nontechnical users to be paying more consistent attention than is realistically safe to rely on.