both privacy and security are important and neither one is going to save you from a social engineering attack.

and besides, trusting on your users to only go to well known websites isn’t something you should rely on.

but yeah, I totally get your point