I'm not convinced knowing about how this works is the solution. Plenty of software engineers that understand TLS/DNS/etc. get phished because it only takes a fe

I'm not convinced knowing about how this works is the solution. Plenty of software engineers that understand TLS/DNS/etc. get phished because it only takes a few minutes of distraction. The same principle applies in medicine or aviation: without systems in place, even the most educated person will predictably fail at least some of the time.