I still feel the bigger issue is that the general public would rather see a forwarded .xls file with "50 Hilarious pet photographs" from 2000 people they don't know than avoid identity theft and system compromise.
And on that note... who the fuck uses Excel to group photographs? The first...