I found the Anarcho-Texh security guide helpful in getting started thinking about this with more nuance. I’m including the link below but here’s a short summary
Are you an: Individual Journalist Targeted Activist
Are you annoying: Random assholes Assholes with resources The State
Each category has bigger security needs on one side and more powerful tools on the other. It’s kind of humbling to realize that I’m just an individual and the NSA has no special interest in me, but that makes me feel better using a separate browser without additional security to shop on sites that block a VPN etc
(Also tbh I’m not sure when this page was last updated and I have no involvement with the org. Just a cool resource)
https://github.com/AnarchoTechNYC/meta/wiki/Persona-based-training-matrix
Honestly as someone who has helped family members set up a password manager one person felt this way and the rest are just not tech savvy. All the simple straightforward stuff took ages because they had never done it before.