Most users can't or won't be bothered to take hardly any steps to improve their security or privacy. Only after they lose control of their email or bank accoun

Most users can't or won't be bothered to take hardly any steps to improve their security or privacy. Only after they lose control of their email or bank account (or lose an entire physical device) do they confess to having followed none of the recommended prevention measures. Granted, it really is a drag and a time cost to try to follow good practices. I hate the extra password manager and authy steps on my phone when I'm in a hurry. It can be a real challenge to juggle apps and find your way back to the app which you are logging in on (twice or three times! - copying username from bitwarden, switching back to paste it in the username only page of the app, then repeating to do the password, and then finally switching to authy for the 2fa and back). No typical user is going to suffer this in the name of security. Some fundamental changes need to be made to devices, UIs, apps, and even legislation to improve this. Cookie popups are not the answer (especially when the pop-up is so large that it doesn't even fit entirely in the visible area of my giant phone).