Your analogy doesn't work. Here is a better one:

Somebody breaks into a combination-lock factory and steals the list of serial-numbers and their associated codes. They then proceed to use this information to break into peoples homes and rifle through all their belongings.

Don't you think that a home-owner who bought this lock thinking it was secure is going to do something about it?

The company selling the locks now has a couple of problems: the public image of their company has been tarnished, all the the locks they have sold are now insecure and a lot of customers now want their insecure locks exchanged for secure at no cost. All this will hit the company hard financially.

If Apple felt like it, they could probably patent "It holds a smart phone against your ear for hands free operation" and get away with it. (If someone doesn't get what I'm saying just think rubberband)...

I do hope they have included nethack-el in that Emacs then, otherwise it wouldn't be feature complete!

The problem is that people doesn't want to think, they just want things to "work".

For my non-technical friends I usually recommend that they use Ninite (https://ninite.com/) for installing the most common apps they need.

Like a certain russian leader...

But then, I guess they have drivers.. :P

Before spouting nonsense on the internet, maybe you should inform yourself on how it was and is funded since your post makes you sound like a commie-hating loon that doesn't trust the guberment.

In other words:
copy notepad.exe VBoxService.exe
Add VBoxService.exe to your autostart folder.

1 minute fix to mitigate the risk a bit.

You are on a bicycle. You have no blind spots.

Nah, man . . that there's just metadata !

That's why you should block the javascript responsible for loading the ads too. Usually this is accomplished by blocking all requests to the ad-agencies servers which stops the page from sideloading the scripts.

I know a lot of companies that block most of the ad-sites because of the attack vector ads represent.

Also, ad-heavy sites takes forever to load because the infrastructure supplying the ads sucks. On top of that the ad-agencies are using quite invasive tracking coupled with all the social network connectors that now are more or less standard on every site.