We're expected to give sensitive information all the time - passwords fingerprints selfies biometrics whatever - supposedly to check if we are the genuine account owner or so
On the other hand there's very little to nothing being done by the computer itself to present unforgeable authentication dialogs - even something as basic as your computer's lock screen or login screen could be faked - and what good is a security system if you're going to be duped into handing your keys anyway?
Security experts all say that you should be vigilant, etc. but it comes off to me to be not that different from dismissively ignoring concerns with the "skill issue" meme
In the end all the burden falls on the user to not be tired or having bad days or being overwhelmed or, well, you get the idea
Like sure the burden of "do I want to do X?" does fall on the user but the user should never have to think about "what if it's actually Y trying to look like X?"
amolith