Or is the best protection against this sort of thing not being a dumbass?

Hospitals not applying security updates, users clicking on strange attachments, et cetera... are given as primary causes in the accounts I’ve read.