After so many years, so many people still believe in this user control paradigm.
Giving users control works for the slim percentage of power users. Most users will end up obliterated by scammers and other unsavory characters.
Perhaps there is a way to give control to today's users (that includes my non-technical mother) and still secure them against the myriad of online threats. If anyone knows of a paper or publication that addresses this, I'd love to read it.
