An individual because they don't instantly sign up to the conventional Rolls-Royce standard of risk mitigation. In the software world password managers may be a gold standard but they don't work for everyone. But taking any mitigating step is better than none and if it works that is success I can