Most users are not educated enough to protect themselves from bad actors. It's our (government, industry, whitehats, etc.) moral responsibility to protect those users from those who would exploit them.

Not that I have a solution, but I don't believe blaming the victim is the solution.