At a certain level, you can't fix stupid (note: the person in my anecdote wasn't the stupid person). Example: once upon a time I worked for a very large public utility and got to be friends with a cool guy who seemed to live in the underground server rooms below Utility HQ. He would offer us (infosec group) 'free' hardware from time to time, which was cool (bear in mind CAPEX is a very good thing in the regulated utility industry, so there were all kinds of things kicking around taking up space).
At one point I was wandering around the halls underground, he spotted me, and said "Hey Mark, can you use this?" while pointing to a check printing machine loaded with valid corporate check paper. My jaw dropped. The first thing I did was look around for 'tells' of a corporate security sting. Dollar signs rolled in front of my eyes.
I asked said subterranean server room dweller if he had any idea what he had, and what he could do with it (I have no doubt one could easily make off with zillions of dollars and have it written off as billing errors). He smiled and said "no," to which I replied that was a good thing for our shareholders, and that he should probably properly dispose of that thing toot sweet. All the processes in the world and yet there was a literal money-printing machine hanging out with no oversight at all, prey to anyone with an RS-232 connection.