URL-based Security Holes in Mac OS X

There has been great hue and cry over the recently found "URL exploits" in Mac OS X. I briefly looked at this issue today. While it's certainly a worrisome situation, in my opinion there seems to be more confusion than necessary (which amounts to a very normal situation in such cases!)

I have a few things to add to what has already been discussed to death in countless places.