I have a relative who has had her credit card details stolen on so many occassions that we've lost count.
She clicks every email link. She signs up to "tarot of the day" and "spirit guide" text message scams. She buys things like the GeoCleanse. She's been in MLMs and near-cults. She's never met a grift she didn't fall for.
No amount of user training is ever going to get through to this person.
She'll lose her whole life savings before she takes a moment to imagine that an email from her own personal fairy guide *might* be some sort of scam.
It is tempting to say that if you're silly enough, you deserve what you get. But it isn't true. People who make poor decisions need protection too.
This is who I imagine when I imagine the user who needs protection.
We need regulation.