That is true, BUT people are willing to learn about securing their cars and houses. They will take precautions. People do change their locks, buy security systems for their cars take care that they do not leave keys lying around. They are willing to make an effort to lock their doors, keep and eye on things. They will avoid buying things with weak security.
When it comes to IT they expect someone else to do it. The problem is no one else cares about your security as much as you do.
When it comes to IT they expect someone else to do it. The problem is no one else cares about your security as much as you do.