if you think the users are stupid, then you are letting your own arrogance reduce your own ability to analyze the problem space fully.
users do things that make sense to them in the moment. failure to understand the context where an action -makes sense- and is thus the correct action to choose is a skill issue on your part.
yes, it is frequently very the fuck difficult to figure out the context wherein a user might choose to do a thing that constitutes a security problem.
that is what you are paid for. get good.
now, I will grant, for those of us who grew up dealing with asshole elders who refused to even consider learning how to interact with computers and demanded things "just work" that were wholly unreasonable, yeah, the 80s, '90s, and early '00s sucked.
get over it.
the fucking boomer dipshits are dying off, and a bunch of zeds and alphas are growing up with an ecosystem that's completely fucked for any attempt to learn on their own.
perhaps fix things for them instead of assuming they magically had access to magazines with BASIC listings and permissive environments where experimentation was at least tolerated, instead of being given a fucking menuless UI on a locked-down kiosk with fuck AI search results either refusing to give them necessary knowledge because it's "Hacking" or telling them to snort glue?
Fi 🏳️⚧️
prom™️