I agree vut I think you missed my point. You said it’s easy and I disagree with that. It may be a simple concept but it’s definitely more work on an everyday basis and you need to spend a significant amount of time and effort on learning and preparing all of that. These are significant barriers.

It seems to me like your rules might protect me from known threats (or not). But I don’t think it is easy to protect against unknown threats. At least when the advice is not using popular technologies and people like journalists necessarily need to use popular communication technologies. Also they may not be able to explain everyone of their contacts that they can’t open any links or documents.