if you want to lever criticism, criticize how expensive hardware wallets are and their lack of support.
If that is true then web3 may be in trouble. For a very long time people have pushed for hardware devices for MFA and yet most people still use phones if they even have MFA at all. I know people with Yubikeys and other devices because of the circles I have been in but in the wider audience of the internet they are exceedingly rare. So unless it becomes super easy for the masses to have a hardware wallet such as their financial institution issuing one then I am not sure how you realistically get past this problem. That of course puts people back into trusting and depending on their financial institution and its third party providers.
After they phish the people with bad OPSEC.
You might think web3 will be in trouble as people stop showing up, but there are so many other opportunities to make money when the good OPSEC people launder all their money by sending a random token’s price sky high, and cashing out as capital gains from their other already clean money. So that will keep attracting people looking for gains. Many people also do secure their holdings properly, the inconvenience of bothering likely driving scarcity.
I got doxxed in their data leak(s): https://www.google.com/search?q=ledger+data+leak
In hindsight, I should've known better than to use PII at the time of purchase.