Warnings don't work. Scammers will tell you please do the needful and dismiss the warning, and grandma will obey. UAC on Windows was instructive: it only served to desensitize people to warning dialogs. Microsoft is moving toward the industry best practice in this regard by setting Windows Defender to quarantine unsigned code automatically.