Ok, so as a web developer i need to assume my users are stupid, unless they are malicious and then they are suddenly clever?