Common Sense
I think it's a lot more than common sense. I regularly try to tell my family members about risks online. Most are gobsmacked to find out that an email can appear to have been sent my someone they know yet still contain dangerous content. As for it not being feasible to run courses - a simple cost-based risk evaluation should put paid to that - just ask the Garmin directors.
Biting the hand that feeds IT
