“I think the main issue here is that the users are not the customers.”
Almost every computer in South Korea runs “security” software, because banks and government sites require it. Palant found the apps riddled with holes, using crypto as obfuscation, and bundling one library more than a decade and 50 releases out of date. The banks buy them because a mandatory install shifts the blame for any hack onto the customer. The software protects the bank’s liability, not your account.