I'm trying to help my friend understand this because he believes that since a site is very popular, that it's less likely to infect its viewers because of its security! but Im trying to explain that he is wrong! 

Please answer this question as detailed as possible so I can direct him to this site. THANKS VERY MUCH