Half the issue is, people need to acquire the same wisdom about cybersecurity hygiene as they do looking both ways before crossing the street, but even that's too much to ask for some people. They just don't do it.
At some point, it has to become the responsibility of the potential victim, if liability is such a concern from big tech companies.