In my opinion its much better to be careful enough if you face a browsing situation where its forcing you to install/update/download something. Get out from there instantly if possible or shut down your device. Prevention is always better than cure.
Nobody can force me to install or download anything, it can only be an attempt which will be stoped by me, or in case that person does not use common sense it will be stoped by security software before installation. If someone is not aware of how the internet works, and what should or should not do during browsing, some things will be learned unfortunately in the hard way. In some cases shut down is only option, just because browser can be frozen, but some browsers will automatically open previously loaded pages and you are back to where everything started.
One correlated hacking procedure is that of Sim Swapping. It combines retrieving your personal data and identity theft. Basically, what Sim Swappers do is convince the telephone operator that they have lost/damaged "their" sim card, and demand a replacement.
They need to make fake documents for this, and they need to go personally at the operator store. In my country you can not get new sim card just by asking that via phone call or by e-mail. In addition to making false documents, almost every store today is under video surveillance, so this is not easy attack to perform. I do not know how that student was caught, but 10 years is too low punishment - he will get out probably a lot earlier, and continue where he left off.
