End user education

[d4ncingd4n at gmail.com (Dancing Dan)]

I agree that it doesn't make sense for the end-user to take certain high
cost/low payoff precautions and it shouldn't even be suggested. But, low
cost/high payoff solutions (passwords/AV/etc) should be a no-brainer (and
what I believe we are discussing here).

People are seldom economically rational. They are also bad at estimating
risk. Besides, many people are just plain bad at math. ;) That's one reason
we have jobs - to recommend appropriate controls to mitigate actual risks.