But it's not the users who are in error. Recently I made my very first server install. I learned everything there is to learn in the field of securing your system. I started out with what everyone is supposed to know, firewalls, tcp wrappers, sudo, and then worked myself down to the details. I was horrified to discover how evil distribution manufacturers really are.
Most distro companies make their distributions with little thought to security in mind.
I did too. There are hundreds of ways to make a Linux install more secure, but none of these companies apparently know of them. Some have glimpses. A newbie barely knows cd, cp and ls. There are things that every distro can do with every install.