The browser works on behalf of the user, not on behalf of the site operator. In the matter of keeping malware off the user's computer, nobody gives two shits what the site operator wants.