In conclusion;
Remember,there are perhaps millions of human and maybe billions of electronic bots out there that are trying to steal from what you have worked-out your life to build,so is time to put in some effort to protect yourself and your assets against any potential attack.
Yes, the last part of your post, as bolded, is it. People should learn how to guard their assets by themselves with all diligence and not leave it to a third party. No matter how secured a wallet/app/device seems to be, it must need the input of a human to set it up. If humans mess it up, it's compromised and that doesn't mean its security is porous. I believe in humans being conscious of things around them and how to safeguard themselves.
I've had a few instances when people called me on phone to send them OTP sent to my device that it was mistakenly sent to me. Of course, we know how all that works. It's a hack of my account waiting to happen once I send them that OTP. I now realize that once anyone gets an OTP to their phone that they didn't ask for, they should know that someone is trying to assess something they've.