That requiring users to install software that makes their devices vulnerable is not a viable security model.