That means education for people: don't perform actions that are in emails.

Blocking apps is like blocking buying of knifes because one can hurt themselves.

Have you ever tried to educate a 70+ year old person on this kind of stuff? Their eyes gloss over and they don't care. I've told my mother not to install random apps on her phone several times yet she still does it. I could probably send her a phishing e-mail right now that 'looks like' it's from me (so long as my name is in the from: field that's enough) and she'd follow the instructions to install a malicious apk too.

"Everyone should just be smarter/more educated" is what I used to think as well. I now fully understand some people have no desire to be educated in any way and it's a net good for society to not have a large % of devices compromised.

It is like saying that you should not have free speech because someone might influence 70+ to say stupid stuff (well, that is already happening...).

Family should be responsible on education or making phone of people that are not educated enough (minors, elderly, etc.) limited - I do that using Family Link. I have there my child and also my in-laws - both of them can't install new apps without my permission.

So the tech is already there, one just needs to use it.

yes, got my father on linux a decade (or more) ago. He's 84. No problem. Most recently we discussed being vigilant against vishing.

Now my in-laws (similar age) one very demented, the other thinks he knows best because he was a chemical engineer...they could use some built in protections

so ultimately I think some default level of "guardrail" is appropriate, but it should have a not too burdensome escape hatch

>so ultimately I think some default level of "guardrail" is appropriate, but it should have a not too burdensome escape hatch

Which is really exactly what google is implementing here and why I'm so perplexed so many people are upset. You or I or smart parents (my mother has never used a computer in her life and wouldn't want to) will have absolutely no issue sideloading apps after the proposed changes.

Given Google's track record, I don't think it's just "being upset" to have serious doubts about the probability of this escape hatch staying indefinitely.

But that's just a completely different discussion that we could've had a long time ago when they introduced it as a on/off security setting ~15-20 years ago too (and I bet people did). IMO nothing has changed except I bet more people will take going into developer options, being sternly warned, then having to wait 24 hours as a sign this is something maybe they shouldn't be doing. And I'd argue if you come to that conclusion and don't look into it further you're probably right,

Given that google is now forced to have competing app stores due to Epic v. Google and the ninth circuit courts went into long and arduous detail in that anti-trust case about sideloading restrictions I don't think they have a leg to stand on if they get rid of sideloading completely. Oddly Apple continues to get away with it no problem.

Google is the one peddling the malware. Any changes to 'security' that don't start with them removing the oodles of malware from their store are not security but profit driven.

It's full of malicious apps on google play. There are none on f-droid.

The logical conclusion is that fdroid should be allowed and google play banned by default.

The answer to people refusing to care about important things in life is not to put restrictions upon everyone's freedom. Ultimately, being an adult means you have to take responsibility for your actions (or lack thereof). It isn't hard to learn how to use a computer responsibly, and I've known plenty of older people who did so just fine. There's no excuse here.

You do understand we've broadly come to the conclusion that this isn't how society should work though, correct? It's why there's warning labels on everything, liability for not warning people for even the dumbest of things they might do with your product or in your establishment, extremely strict laws for things like driving a car, flying an airplane, or using any kind of heavy machinery, responsibility of servers to cut people off if they've had too much alcohol, the list goes on. I find intelligent people often have this mindset that all "real adults" are just as responsible as they are. It's just not the case.

And I generally wouldn't care "have at it" if their phone/computer being compromised only harmed them. But a bulk amount of compromised devices harms us all.

"Think of how stupid the average person is and then realize half of them are stupider than that!" -George Carlin

That would be like requiring people taking driving lessons before driving cars - what nonsense! Just let them behind the wheel & they will figure it out just fine!

Because education has worked so well on Windows.

There's not an easy answer, but the non-answer of "people just need to be educated" is trivially dismissed.

I'm not sure the situations are comparable when Windows doesn't have this permission system where the apps are still very limited in what they can access unless you grant specific directory access or access to the contact list or such

It does, but approximately nobody uses it, because Microsoft also tried to apply loads of constraints on what kinds of program could exist when they rolled it out, as part of their "all Windows software should also work on Windows Phone and Xbox" campaign.