As a SysSec undergrad, the biggest bit of advice I can give is you are not invincible and if caught in the wrong state of mind at the wrong time, it can be very easy for someone to socially manipulate you
gen z be like “how do old people for for scams, they’re SO obvious haha” and then fall victim to a slightly more advanced phishing attack