That's an exhaustive list and more than most people will read, but it's got some good content. Looking forward to someone replying with a simpler version that we can pass on to friends who type google into the chrome address bar.
https://securityplanner.consumerreports.org/ I've seen this one posted on Twitter several times. The fact that you can choose the devices that you own/are interested in securing makes it stand out to me.
When they check emails, they should always double check who is sending it. One common question I get asked - "Is this email legit?", where the email claims to be Microsoft, Google, etc. saying they _need_ to click this link to do X for their account.
Find out their preferred online communities & ask there. Those communities have already been (de facto) filtered for favored perspectives & styles, so by definition the tool / advice selection will be better for them.
That's an exhaustive list and more than most people will read, but it's got some good content. Looking forward to someone replying with a simpler version that we can pass on to friends who type google into the chrome address bar.