> when it comes to security, they trust nobody but themselves, not even the user they sell the device to. It's kind of a strange mindset

It is a strange mindset until you remember that obvious phishing attempts are still crippling organisations and so does ransomware and social engineering.

Relevant: https://youtu.be/kkCwFkOZoOY