That's the danger that a lot of blacklist based firewall/web filters have. Since most of the economy of the web is based on legally stealing information and pushing information onto people, having them believe that X module does block malicious content is a good way to scame people, this is what happened with ADP and ublock (the first).

The only way that people can avoid this is to use uMatrix with a whitelist methodology.