I really disagree with the use of bad guy in any of those laws. It biases the reader from the get go to only worry about the bad guy, you should worry about every user.
The articles says this, "If a stranger walked up to you and handed you a sandwich, would you eat it? Probably not. How about if your best friend gave you a sandwich? Maybe you would, maybe you wouldn't—it depends on whether she made it or found it lying in the street. Apply the same critical thought to a program that you would to a sandwich, and you'll usually be safe."
Which I thought was pretty good.