Very few people actively decide to be careless about security.
Most insecurity comes from default settings, convenience, and lack of visibility.

Devices arrive preconfigured. Apps ask for permissions casually.
Security decisions are buried under “Accept” buttons and urgency.

Over time, people don’t ignore security. they stop seeing it.

This makes cybersecurity less of a technical problem and more of a design one.
If safety requires constant effort, most users will eventually fail.

How much responsibility should fall on users 
and how much on systems?