Agreed. The onus is not only on the user to respond to threat landscapes, but also on the site owners. Shunting all the responsibility to the site owner typically does not work in your favor.