I guess thats what the virtualbox image is for?
Perhaps you can't expect "normal people" to be the target group for everything though. First class security often comes at a price, in some cases this is fine.
As long as we used the latest OpenSSH and picked the better algorithms we'd stand a better chance of resisting a skilled attacker than using this project.
The problem is we have nothing to say to each other. We all have sensitive conversations with our lawyers, doctors, immediate family, and the like. And those people cannot make use of solutions that require knowledge of how to actually use a computer.