"Assuming Nitesh's analysis is accurate, 'unwanted downloads,' as Apple calls them, represent a serious security threat to users, who can be easily tricked into executing a malicious file," argued Stopbadware.org.
The group has rebuked Apple before. In March, when Apple started using its software update utility to push Safari 3.1 to Windows users, Stopbadware.org first noted the move, then later said that, following its usual practice, it had notified Apple it would soon issue a "badware" alert for the company's Software Update.
The day before Stopbadware.org was set to release that alert, Apple modified how the updater offered Safari 3.1, separating updates for already-installed programs from offers to install new software.
Apple did not reply to a request for comment on its security team's decision against adding a user-approval option to Safari.
Computerworld is an InfoWorld affiliate.