Don’t just blindly download one of these things and start using it on a system that has access to your whole personal life

This is exactly what everyone is going to do. No developer should expect all their users to independently adopt good security practices. That should be baked into the software.