This stuff has risks PERFECTLY managable with a functioning IT department, but disasterous for home users.

Bitlocker is a perfect example of this.

Security advocates model your threats challenge.

For my corporate work stuff where if they fail, I can have my manager verify my identity to the help desk to do a reset? Fine.

For things like my personal email where there’s not a way for me to reach someone who will reset? Fuuuuuuuuccckk noooo!!! The failure mode is just too much for me.

Like we should never assume a users device will always be accessable, reliable, and always owned by an individual.

Why not use a 2fa that can be breached within months? The event will be over by then anyway, so you can just close down that account.

Ideally her home would have a small computer lab for those few computer tasks, and she would spend more of her time offline.

What I am saying is "We need to stop pressuring everyone to have a fucking smartphone"

absolutely
but as I tried , and possibly failed, to say, it is very hard to design systems that work well for the half percent

But as digitalization progresses, access becomes essential and you are forced to pay for it.

I’m addressing a different angle to the topic as well, so to say. In no way am I invalidating the statement.

They won't stop targeted attacks, but those aren't a concern for majority of people.

We made everything more accessible through digitalization, but handed the key to the gate to a select few corporations, hiking prices and excluding those that just want to participate, but lack the will or funds to do so.

It is cruel to require senior citizens on severely limited incomes to have cell phones & email accounts.

The burden obviously falls disproportionately on the poor, immigrants, illiterate, elderly or disabled. But also a surprising amount of people simply feel alienated by online services.

I think it would be helpful if more people who are more privileged chose to do things offline where possible. It makes it easier for companies and the government to justify the expense for people who are marginalised.

Also protects against credential stuffing in the case of reused passwords, which is likely a bigger risk to the average person.

No, we don't like it any more than you do. Thank the swill-licking bargepole-swallowers who try to attack anything and everything just for kicks, and the even scummier crooks who pay them for credentials.