The white paper assumes that you don't have a malicious device. If someone can modify the code running your device, they don't need to double spend, they can just directly steal your cryptocurrency.
And I think we can both further agree that someone that isn't us modifies the code of the Bitcoin node we run on our devices. Unless you're still running Bitcoin 0.1, but then you're actually not on the "Bitcoin" network as we know it today. There are pressures outside of your control that make it so that you have to update your node, and you have to run new code you probably haven't reviewed or approved yourself.
The only way to make Bitcoin work as defined by Satoshi is to have the code be 100% perfect and then not touch it, and that ship sailed a long time ago.
They also won't refund you for fraudulent charges unless you report them quickly enough.