Yeah. There's a lot of security information that is easy to understand, but not very accessible. I've been thinking about writing a book on that topic, for that very reason.

Start out with things like, "don't leave your telnet port open" which seems obvious, but apparently is hard for a lot of people. Then from there lead to a reasonable understanding of metasploit.