Some of these tips may seem overly simplistic or easy for attackers to overcome. Which is true, these are relatively straight forward security measures and most of them would be easy for an attacker to work around. The nice thing is that most attackers are looking to exploit the lowest common denominator, the easiest targets. The majority of people take no security precautions - they do use simple passwords, download third-party software, and don’t stay on top of security updates. The vastness of the Internet allows attackers to take over thousands of machines by just going after these easy targets so they don’t usually put in additional work. To put it another way, you don’t need to be the fastest gazelle on the savanna, you just need to not be the slowest because that’s who the lions are chasing - the slowest gazelle.