There is also a big "grey zone" where people will do a good job when evaluating security for others, but a really good job with their own security.

You could think of this as avoiding "a scam", but there is no conscious intention involved.