Also meant to call out the irony of your "MP3.EXE" example earlier. Whose bright idea was it to use DOS-era file extensions to drive executable functionality, then hide those extensions from the user by default? That would be Microsoft. The bad guys just took advantage of their lack of actual cybersecurity horse sense.
The paranoid stupidity surrounding forced Spectre and Meltdown mitigations, whose carbon footprint is probably getting close to that of Bitcoin at this point, is just another example.