Yeah. That’s unfortunately a barrier to mass adoption too. People are (for the most part) dumb about security.
“Oh, yes Microsoft tech support agent calling me from India, please have my 6 digits 2FA code for my banking account to verify my identity”.
Then the same person will later blame their bank for the theft!
When you don’t have a safety net it’s hard! You have only yourself to blame and that’s not a comfortable feeling. Accountability?
I don’t know to what degree normies are prepared to remove the safety net of a “benevolent protector government”.