Good advice, and you’ve touched the critical principle - data security is fundamentally an economic and psychological problem.
You have to make it more economically and psychologically attractive for people to not hack your systems, because all security can be defeated by the $5 wrench method. If it’s possible for someone to make eleventy million dollars by hacking my phone, then the costs of hacking my phone need to cause more harm to them than eleventy million dollars is worth.
Security’s one of my professional hats, too.
We need a new thread if we’re going to keep this up, but I’m out for the weekend. Gotta put a new roof on the house and no, that is not a euphemism!