This is very close to something that happened to a friend of mine. They were trying to follow a MoltBot installation guide, but clicked on a different link that looked legitimate. That page instructed them to paste a command into Terminal.
After running it, macOS immediately started asking for multiple permissions, which in hindsight was the big warning sign.
But for someone who is non technical might have ran with it.
This might sound stupid, but I have my own index, of trusted domains:
https://github.com/rumca-js/Internet-Places-Database
I start with it, to find stuff I know. If there is stuff I don't know and is important to me, I add it to my database.
Also it enforces me to verify each link I visit. So links I visit are mostly ok.
Though I sometimes use chatgpt for instructions, and if someone poinsed the well "well enough" it might spread malware.
AI often generates parts of code for my hobby projects, which allow me speed running with my implementation. It often generates errors, but I am also skilled, so I fix error in the code.
I use AI as boiler plate code generator, or documentation assist, for languages I do not use daily. These solutions I rarely use 1:1, but if I had to go through readme's and readthedocs, it would take me a lot longer.
Would there be more elegant solutions? often - yes. Does it really matter? For me - not.