I too have noticed this, even when legitimate sites get attacked with bugs or malware, the public don't get detailed briefing on exactly how those affected downloaded or installed the malware, only a surficial or general warning is given, which imo doesn't really help those who were not/could potentially be affected/attacked later on.

Op can tell us where he met this "random person", was he or she recommended to you; where on the internet did they meet: social media? (Telegram, youtube, etc) or was it just a random unsolicited pm. Mind you that another user may be allured in the same way you were and your info may help them to inspect the site more to know it's a scam.