Most users just want to know how to keep their devices updated with little intervention, how (and why) to use a password manager, and have reassurance about account recovery if they lose their passkey or auth token generator.

But users don���t know the important Security Things. Things like all the places where a link can appear, or why RFCs intended links to be clicked but didn���t bother to explain which links are safe and which aren���t. U...