That's been my understanding too, and I've seen security professionals say the same. But possibly, their advice was intended for likely targets, such as journalists, and not the general public.

On the other hand, I'm not sure I'd trust a typical end user to protect themself otherwise. Are they going to secure their OS profile? Avoid malware?