If someone starts down the rabbithole of encrypted email, Tor, key-signing parties, etc., there should be a safe place they can go (physically and/or online) to get absolutely walloped by good-natured hackers who will do everything short of permanently harming the person's hardware/reputation to show them they don't know what the hell they are doing.

Without this, these efforts will fall flat because the users (and even devs in many cases) aren't doing a good job of testing whether their systems work. The only sure way to test them is to get the internet to hate you, and that's too big a price to pay for testing a privacy system.

It's a bit like someone running tests and celebrating their algo as the most performant without realizing the compiler simply optimized out the algo. Chances are that person is going to have a bad time when the thing goes into production.

There's also a fringe-benefit, which is that users/devs who don't give up and continue getting walloped will quickly realize the value of credential revocation and tell others about that value.

Edit: just so it's clear-- the point is for the user/dev to be able to enter the group/place when they wish to be taught, and leave when they are done. That's the current problem with testing by making the internet hate you-- you can't turn it off.