Comment by Silhouette

But it doesn't relieve you, the citizen, of responsibility to be mindful and exercise situational awareness.

How can you exercise situational awareness against a zero-day attack?

There are several parties who have an opportunity to detect that problem before it causes serious damage to people visiting a website. The visitors themselves are not among them. Trying to make those visitors responsible for the consequences is nonsensical.