Not surprising really. We don't have any education in schools about malware threats, people hardly know that there are malware researchers who report about threats daily and cyber security is an actual issue. Until we start actively enforcing, or at least convincing people to educate themselves, this will keep happening....