The user entitle software when they install it & give privileges. The issue has to be solved upstream. Instead of blaming software vendors, we have to build the systems to take back control.
Software that disregards the users wishes when you run it used to be called malware. An install is not an entitlement to do whatever you want. Software vendors are the ones writing this malware so why should they not be blamed.
