What you need is leadership and policy that let you enforce the use of a password manager.

#1 is why I don't soil myself over AI. It found a new way to do the thing you should already be monitoring for. Wow.

#2 - I think infosec should be taught almost like a humanities field. it's about people behavior as much as technical anything.

Been there. Sharing something you find with product vendor and getting the 'feature not bug' talk is painful.

1) Cybersecurity is no longer a rapidly changing industry. We, more or less, know how to do things well. It hasn't been for 5... maybe 10 years at this point.

2) Cybersecurity is a half-hearted attempt at turning computing into an engineering field. In 20 years, assuming the world doesn't get destroyed, I think we'll be talking about it more in terms of 'computing safety engineering" or something similar.