Yeah, this is your fault if you install the skill.

This reads to me as "user installed exe file can upload your data to a server". Um, yes, that's the point?

This seems like this generation's equivalent of "don't open Linkin-Park.mp3.exe from limewire"