For example, and I do hate giving this an an example as it comes across as stereotypical, but it's not meant to be that way; a older generation person that hasn't had much interest in computers, will likely be more inclined to use anti virus because they don't have the knowledge to secure themselves. However, while there's nothing wrong with this approach, there's definitely a element of risk here, since that person will likely assume that they're safe from all attacks, and therefore will be more complacent, when in fact they aren't completely secure.
Well, I am 56 years "young" (no offense taken though), so you could say I'm an "older generation person", but I have been very interested in computers since I was little, yet I don't feel I have the knowledge to effectively protect myself. I find there are so many different classes of attacks, it's overwhelming.
Incidentally I switched to Linux more than a decade ago, and felt somehow secure because of it, but since I started on cryptocurrencies I wouldn't bet on it.
So, avoiding leaks is impossible if you use the internet, and sign up to services.
Nothing is impossible. It just takes work, and, like you said, it may be inconvenient at times, but it can be done, and it has been done. Now they say web 3.0 will be more focused on personal security and privacy. We'll see...
For example, I will say something about my experience with Norton Security, which I consider almost perfect.
I used Norton once in 2005, on a computer I
knew, for a fact, was infected. It didn't find anything, even when running it in "safe mode". Then I did a google search and found Spybot S&D. on the first run, it found about 1800 viruses. On a second run on "safe mode", it found another 300. I never used Norton again.