if basic security doesn't work, why do people bother with passwords or basic cybersecurity measures? Most crimes are done on soft targets, even making things sl

if basic security doesn't work, why do people bother with passwords or basic cybersecurity measures? Most crimes are done on soft targets, even making things slightly difficult is enough Common sense says that making espionage even slightly harder has fantastic results, look at how restrictions on nuclear technology have been successful at preventing proliferation for decades. North Korea only got their nukes after the US lifted sanctions under Clinton for a few years and China helped them