The user is to blame? Let's be realistic about how the average person handles technology in general, is aware of malware on their devices, or how many browser choices they have.