Soda:

The flaw:
Er.... Isn't the "flaw" the user himself????? I mean c'mon.... If you don't know what the cmd prompt is what could possibly be so important as to coax a user of this level into following the instructions without suspicion. Or, if you do know what the cmd prompt is you should know better then to be doing what the instructions say anyway..... Shouldn't you?????

This is a perfect example of the developers having to try to determine _every_ potential action by the end users and as I was told a long time ago "It doesn't matter how good you think you are at predicting what the idiots will do with your computer and stopping them because they will simply breed better idiots".