I have always said they should consider people as a given and design for people. (Although, I like the alternative of destroying the human race and genetically engineering a new species capable of using your crappy web page.)
I am not worried about people clicking on links. I am worried about companies designing systems that ask users to click on links using connections that are easily hijacked.
And, honestly, why on Earth are passwords still a thing?
