Learning digital security as a “non-techie”