Often times it is an individual issue.
Sometimes someone somewhere is compromising secure protocols (HTTPS, TLS, ETC) and can do things like MITM attacks along with other nefarious things. For instance, change a png into something like a jfif that can inject things that can further compromise your system. Then again no device (widely available) is truly ever secure.
Well, this helps clarify a few things.