@ixlone - Well, I certainly never said I was infallible, however I'm not necessarily sure I agree with your analogy. Sure, I make mistakes. You could even say that the sum of who I am is built on a foundation of failures and mishaps. However, I also prudently try to take any necessary precaution and preventative measures when I can -- particularly when my security is involved. There's no doubt I was unaware of the two-step authentication available; however, as a user who vanishes for months at a time in order to accumulate a backlog (or because of life) I don't belive that missing an announcement is a "mistake" as much as it's just poor timing. Additionally, missing the announcement wouldn't invalidate the diligence I consciously, and consistently, put into ensuring that I remain secure. At least that's what I believe.
I wasn't condemning people for their role in my comment, as much as I was more genuinely confused. Phishing has been around for as long as I can remember. Since the days of '733t warez' groups on AOL and probably before -- it's been a constant pernicious existence. One that, in most cases, has evolved into a multifarious monster that continues to grow. I would hope that by now, with a generation that's never known a world without, that most would take a sort of personal accountability in the distribution of their sensitive information and wear some kind of "internet condom", ya know?
Anyway, this post is too long. I understand the point you're trying to make, but I also truly believe that people have an active role in keeping themselves secure. One that they often delegate elsewhere and remain apathetic about until it's too late. Then they turn it into someone else's fault.
I appreciate you taking the time to respond to me -- even if it was to use me as an example.
I hope you have an awesome day. Thank you for all your work you do here.