However, from a practical perspective, deceiving users into performing the required action shouldn’t be overly challenging, and given the vast size of WinRAR’s user base
Excuse me, but “vast” size of WinRAR’s user base? I didn’t know WinRAR even had any users left.