I think the problem lies in 2 areas, the people who design the site tend to make it more and more sophisticated using the tools available such a Java etc., and the users are screwing their browsers down tighter to prevent malware getting in, the two are mutually exclusive.