An important text to read! 👆
Thank you @SwiftOnSecurity for writing it, @brainwane for preserving it and adding commentary, and @mwl for spreading it further.
Security is a system and a process -- it is never achieved and done, and it cannot be one person's responsibility, especially a novice and/or someone with better things to do. How to solve this with consumer computing is a tough problem, and we're mostly not seriously trying.
Just like with usability, and they're not unrelated.