So much low-effort high-reward internet security advice now like that …

- always let your devices autofill passwords, because they can tell if the site is genuine. You can’t.

- never prove who you are to a stranger

- nothing is ever urgent

- it’s your responsibility to prove who’s talking to you