Educating users on any topic not relevant to their immediate task flow is not going to have any traction. Safety controls in industries where accidents kill people are frequently bypassed, because it made their operations slower. If we want to protect users at all, we need to make security so transparent it doesn't get in the way of the user and so omnipresent it can't be bypassed - because once we put in toggles, those toggles get flipped for trivialities. Imagine disabling application integrity signing for a wallpaper.