For Trojan -- I mean the part where the user is going along, minding his/her business, NOT running any adobe apps at all, and all of a sudden an alert panel appears out of nowhere saying "Hey, I'm going to update some Adobe app(s) for you. Believe me, I'm telling the truth, and when I ask for your admin username and password I'm not going to be sending that off to hackers somewhere on the other side of the planet who are going to steal your identity, empty your bank accounts, encrypt all of your files and demand ransom for the encryption key, etc. No, really, I'm really an Adobe updater, not a Trojan Horse using a screen shot from the real Adobe app." The problem is that the real app uses a Trojan methodology to install legitimate updates, and in the process leaves you far more open to being "human engineered" by hackers using exactly the same process.
Compare that to the security advice for giving your social security number, credit card number, etc over the phone -- if you called them, then give them the info, where if they called you, DON'T give them the info because you don't know that they are really who they say they are. Adobe's update procedures are like getting phone calls out of the blue from someone claiming to be your credit card company and wanting you to tell them your number.
