I had an identity theft a few years back, still cleaning up from it. At the time I had the typical set of standard passwords that I would use. I thought they were ok since they were pretty random but I had one for Financial, one for Web Services, etc. so of course when the creds leaked, I suddenly had a bunch of credit card bills I never signed up for..
Since then, every password is unique, my default is 31 characters, and 2-factor for everything possible. Unfortunately I initially settled on LastPass, figured that they had hopefully learned their lesson from their breach years ago. Then it happened again recently and I moved to Bitwarden so that I can eventually migrate to a self-hosted solution.
I've been trying to get my family on board for years but it's still too complex. Non-technical folk still will take the path of least resistance, even when the dangers are right in front of their face. We need something better.
honestly, I have experienced the opposite lately. These days, anything I'm looking to do in Linux has already been done and someone has written instructions for it. If it requires digging in to any nitty-gritty, there's usually decent documentation as well. Windows has so many opaque and propriety processes, and opens so many network connections that I am not entirely sure what the OS is doing most of the time.