I would disagree that this is a COTS solution. The idea behind COTS is not to be tied to one vendor, e.g. use a general PC. All you have done is replace a specific purpose proprietary system with a slightly more general purpose proprietary system.

Sand is a fluid ..... so a fluid still flows on Mars ....

I agree with you somewhat. Users should take a more active role in making sure that their computers are not causing serious damage to the system as a whole. But I also assign blame to the OS and application makers for not making that simpler. Essentially what I am saying is ... users should follow best practices (security, patches, A/V), but those practices should be easy to implement and the end user should not necessarily be required to understand how they work. This is where the end users have been let down. It boils down to ..... not everyone should have to be an expert in computer security to use the internet.

You say that like it is the users fault, however, poor documentation and complex UI design (although completely off topic) is equally, if not more at fault ..... Does a pilot ridicule you when you fly on his plane but don't understand the aerodynamics?

While there are better music sites available to buy, think about how much publicity they are getting from "nay sayers" by buying a brand that is so doubted ..... Right or wrong: brand name + decent service + publicity = $$$$$