let's be honest. that's still not completely true. let's take axie infinity for example, it was hacked by leveraging a vulnerability in the ronnin bridge. none of the users that lost money in that hack did anything wrong. There are always risks, and a lot of them exist beyond the end-users control.