People don't know and don't know to care. People think it's enough to disclose breaches, to send an email, whatever, and other people happily go about recommend

People don't know and don't know to care. People think it's enough to disclose breaches, to send an email, whatever, and other people happily go about recommending password managers as some kind of magic silver bullet, but if you're not tech savvy, and if you're not security savvy, you're honestly no better off.