If you had to set up a non-technical relative today (new laptop or phone, fresh install, you get one afternoon to do it), would you pay for a full security suite, or would you stick with built-in protections plus a short “house rules” list?
I’m asking because the threat mix has shifted.
A lot of real-world damage now comes from identity and credential abuse (phishing, session theft, OAuth tricks), not just classic “download an EXE, get a virus.” Verizon’s 2025 DBIR calls out stolen...