Changing behaviors is difficult from any aspect, but with security we seem to have a bubble around are heads. Businesses and even consumers often fail to take it seriously until a direct impact. Taking security seriously can avoid those impacts. You are correct, we all need to step up.