Even people who follow a sensible password policy could fall victim if a site that they trust is compromised and their personal information is used against them

Even people who follow a sensible password policy could fall victim if a site that they trust is compromised and their personal information is used against them in part of a bigger scam. The problem with providing Infosec education is that the threats change faster than we could reasonably hope to keep people up to date with them and even programmers struggle to truly understand it all.