They’re incompetent because they think they’re better than everyone else, and they don’t need to follow the rules established by others.

True, but while that doesn’t make them tech-illiterate, it does make them security-illiterate. They think rules around security don’t apply to them because they think they’re better than others and as such rules shouldn’t apply to them. They think of themselves as infallible. To believe so means you have to be illiterate about how security actually functions.