Which mindset in particular?

With the hacks mentioned, people might begin to get really confused. Some trusted custodians; their funds were stolen. Some didn't trust custodians and preferred to self-custody; their funds were stolen just the same. Some funds were kept online; they weren't sufficiently secured. Some funds were kept offline; they weren't sufficiently secured, either. 

So, which cliché to do away with? Internet must be freed from whom?

Real problem is they think that having a key is enough, but the problem is they are actually still exposed for exploits and other issues.

So even if there's no methods could guarantee them 100% protection, still they could do something like setting up multiple safeguard to lessen their chance to hit by an exploit.

Better aim doing things that can enhance their safety and don't join with wrong opinions, because that might give them a painful lesson which for sure they don't want to experience.

Which then brings us to a cycle. Because humans are said to be inherently weak, various services are offered, including banks and other custodians. But then banks and custodians themselves also failed in their responsibilities. Therefore, individuals must take back what they've entrusted to them. But because they're inherently weak, they also failed. So, yeah, there must be no perfect way.


And what about the Ledger Recover subscription? But you could go more technical, but the point remains.

And this is the responsibility of these platforms and so as we as individual users, we also need to be aware of our own security. While these platforms can be accountable if ever a small hole has been abused to them, they can potentially what is lost for their users. But we as individuals, if you are at fault there's no way that you'll get a potential refund or safu or however they call those funds recovery programs they have. We are our own security and we protect ourselves depending on the practice that we do.

I know all this, i am talking about new users in the network and those whom i recommend self-custody over custodial storage to, they are not wrong to think in that way. As for a strong passphrase, it is a great extra layer of security, but you wouldn't always need it not to lose your funds, your seed phrase is enough, as long as you don't expose it. It would be unfair to turn to the Coldcard victims and ask them why they didn't extend their seed words with a passphrase.
It is not the most newbie-friendly thing to do, and rather than recommend this to newbies, it would be better for them to allow their wallet generate the seed phrase for them, so they don't screw themselves up.