I understand that people at Google tend to think in the "purely technical", but that's why I feel they're so poorly equipped to protect people. They fail to account for the real world, where people do dumb things. It's not okay to build a platform you intend non-technical users to use, and then blame the user for getting exploited when you do nothing to prevent it.