Browser-delivered malware rides on search ads, fake update prompts, and spoofed pages. The user starts every step, which is exactly why perimeter tools miss it.
Attackers often call the help desk instead of breaching it, talking agents into resets and MFA changes. Least privilege for support staff limits the damage.
Admin By Request for macOS 5.3 brings System Settings pre-approval, app blocking, and passwordless unattended access. Granular Mac privilege control is here.