You don&#x27;t need to crack a safe if you can get the combination from the owner. You don&#x27;t need to pick a lock if you can pick the key from a pocket. It also goes to the classic XKCD comic about the realities of crypto: <a href="https:&#x2F;&#x2F;xkcd.com&#x2F;538&#x2F;" rel="nofollow">https:&#x2F;&#x2F;xkcd.com&#x2F;538&#x2F;</a><p>As for why so little attention is paid to the human side, I think you said it, &quot;We can&#x27;t develop defenses the same way we can develop defenses in software.&quot; Not only that, but a human being who&#x27;s brilliant in their role in your company, might be singularly unsuited to learning lessons about social engineering.<p>I suppose if you want a humorous and somewhat dystopian sci-fi view of how this could be managed... you ever read &#x27;Snow Crash&#x27;?