This is the classic case where too much friction leads to worse security. People just adapt in risky ways. What’s missing is ongoing training and real-time risk monitoring. That’s why tools like cyberupgrade.net are useful—they automate this part and reduce user resistance while keeping systems compliant.