> In other words: the user must be educated, you cannot solve this problem with technical means. Educating users not to do insecure things doesn't really scale

> In other words: the user must be educated, you cannot solve this problem with technical means. Educating users not to do insecure things doesn't really scale well, and hasn't exactly had a great track record. Defence in depth, however, is a well-established and successful security strategy.