It's not a discrete one or the other choice here. I think it's very unrealistic to believe that for the average person this is a dangerous security risk in practical terms.

The number of times people might do this is probably well below 100 and there are much more risky day to day security faux pas than this.

Casual pipe to shell is just a symptom of something much bigger, obviously present only in programmers.

One reason the bad is successful being the new normal is it came in smaller doses you don't even notice that or you think it's ok to ignore.