Bruce Schneier:

Users are free to click around the Web until they encounter a link to a phishing website. Then everyone wants to know how to train the user not to click on suspicios links. But you can’t train users not to click on links when you’ve spent the past two decades teaching them that links are there to be clicked.

John Gruber:

A good “simple” design will help users to understand what is actually going on, how a thing actually works.