Absolutely agree. Even basics like password manager instead of one password everywhere.

It is about the overall attitude. One cannot expect people to think about secure code, when they don't follow basic principles outside of the product itself.