My point is that saying it's all the consumers responsibility is a highly one-sided argument in favour of the vendor/service provider.

The amount of work a person would have to do to research every facet of every product they buy is insurmountable. There is no possible way for them to know everything about a product they are thinking of buying or using.

Expecting the average user to know which apps on any given app store are ridden with malware is a mighty tall order.

The customer will always have some level of ignorance about the product, so some measure of consumer protection is required.

It's unrealistic.