Yeah I've to agree with Matts, it is there fault if they click a dodgy site or have chosen a poorly password.So it's not the users fault if they click a malicious link?
It's not the users fault if they go on a dodgy site?
It's not the users fault ifnthey have a poor password?
Who's fault is it then..















If someone manages to get their account 

