It is proven that the most effective security arises from:
1. Changing user attitudes; and
2. Changing user behaviors; and
3. Giving them incentives to make those changes; and
4. Closely instruct and support those that cannot figure it out.
The challenge is like taking the 275 kg body mass person down to 75 kg.
This is Hijō ni muzukashī mondai - very difficult problem. Just like the global obesity problem trying to be solved by public health policies alone.