The Attack Surface in Your Chat Window: How Ordinary Users Can Think About AI Security