You might be assuming tech-capable users. My concern focuses around those like my parents, uncles, aunts, cousins, friends and acquaintances for whom what happens past the keyboard and mouse is as mysterious as can be. Trying to educate users, at some level, is an exercise in futility. It just isn't going to happen.

The situation here is that someone might trust a company like Google (not picking on them...just a good example of the mechanism), download Chrome and start using it for everything. This can happen at home or the office. By doing this they are exposing themselves at the worst possible level to identity theft and worst, without as much as a warning. It's perplexing, to be honest.

My wife would save emails from services that she subscribed to in order to "have the user id and password handy if I forget". Probably half a dozen emails with plain-text passwords on her machine (deleted now after an explanation). There have to be millions of people with similar issues out there.

I'd say that blaming the user isn't quite right in all cases. The sites and companies that expose their most secure information so easily are the real culprits. Google, are you reading this? Fix Chrome please, this security flaw is bad, bad, bad.