For a general statement I agree with you. I find it even a good thing to teach everyone, not just journalists, basic data hygiene. The target audience set howev

For a general statement I agree with you. I find it even a good thing to teach everyone, not just journalists, basic data hygiene. The target audience set however is far from general. They are journalists and non-profits. Such entities have adversaries such as https://en.wikipedia.org/wiki/Tailored_Access_Operations https://en.wikipedia.org/wiki/Tailored_Access_Operations haunting them. Even most well trained security professionals are far from qualified enough to deal with such actors. In other words, people should be honest with the journalists and tell them they are not competent enough to assess or commit trade offs. On most occassions, knowing you are not secure is the best security you can get as it alters your behaviour accordingly.