Yeah they are correct. IF someone is dumb enough to install a program that they are not familiar with.
Hardly a flaw. I tested their program (yes I downloaded the file and clicked on it) and to run the program you have to click "OK" and allow it access.
So I suppose yes if I click on a virus file and say OK like a moron and allow it access then yes I suppose it would be a flaw or the computer could just be running the program that I clicked on to install. What a shock computers still are not smart and STILL rely on users.