That's kinda the point: blaming autorun will make people who are "smart" enough to switch off autorun feel secure.

But they aren't. There are vulnerabilities far more insidious than autorun.