Ask HN: Why do people blindly trust closed source security software?

You see this over and over again. Here's a great example. Google "how to detect a keylogger" and you get advice to install malware bytes and spybot. The huge problem, of course, is that they want you to install MORE possibly compromised software.

VPN software is another big one. "Hey I really need to protect my privacy. So the very first thing I'm going to do is install third party software for a VPN".

If you want browser security you should install x, y, and z extension. etc.

Have you noticed the same thing or do you think I'm looking at this wrong?