I think it's because way too many people don't have firm boundaries. They don't recognize unacceptable behavior and so cannot put a stop to it before they are victimized.

Someone tried to scam me once by taking over the Instagram account of a hotel and baiting me with a discount. That by itself is not a problem, it could be a legit offer. Their intentions became obvious when I randomly got a message with a 2 factor code and they asked me for the number.

Criminals must necessarily violate social rules in order to carry out their crimes. A robber on the street must close the distance against the victim in order to get in attack range. In my case, the unacceptable behavior was asking me about information that was not only secret but also useless to anyone but me. Recognizing these violations of social norms and enforcing firm boundaries is necessary to defend against these people. People who don't understand what a 2 factor code is will not recognize that it is unacceptable behavior for another person to ask for one and will see no problem with revealing the secret.