I worry about this a lot. Every friend I've ever helped get a hardware wallet to protect their stack is at risk of falling victim to the most bullshit form of phishing like what happened with the Blockstream emails people saw come through this week, urgently insisting that users upgrade their firmware. I have to constantly stay on guard for them, because they aren't in these circles. They just exist and HODL in normie world.