11 points by notypes
I really appreciate how this is framed in terms of safety and hazard avoidance! I think the infosec community as a whole would be better off using safety culture mental models.