other OPSEC practices we all need to follow, regardless of threat model. That doesn't really add up - a goals of things like more secure phones and secure gen

other OPSEC practices we all need to follow, regardless of threat model. That doesn't really add up - a goals of things like more secure phones and secure general purpose messengers is explicitly to provide a high level of security without following a bunch of OPSEC practices. You aren't going to get mass adoption of more secure systems by insisting everyone take up OPSEC practices 'regardless of threat model'. The aim is to reach that adoption through systems that offer a lot of security without a lot of security-related ceremony. It's sort of inherent in the notion of mass adoption.