Social engineering is a legitimate attack vector.

"try this edgy nerd game/challenge for the lulz" is just as valid an exploit as "to see the dancing pigs, just run this `curl | bash` command"