The best security is the one you don't have to educate people about. Today's HTTPS implementations such as HSTS/Preload, DoT/DoH, etc can thwart most of the dum

The best security is the one you don't have to educate people about. Today's HTTPS implementations such as HSTS/Preload, DoT/DoH, etc can thwart most of the dumb attacks easily. In mobile apps, you can even pin a particular certificate and it's pretty much safe from.someone with the network access. I work on security, and I connect to open wifi networks all the time when I travel. I trust myself to not install random root certs and not ignorant to go past https warnings. For my own apps, I have HSTS preloaded, proper CSP headers, and don't TLS < 1.2.