>trusting random sources

A recent example to add to this, for those who think "nobody who's not a complete beginner would never do that":

https://www.reddit.com/r/netsec/comments/3lefc6/chinese_ios_...