When we talk about Drupal security, most people think about firewalls, patches, and malware scans. Those things matter — they always will. But what too often gets overlooked is the part that users play in keeping a site secure. Not just the end users, either. Editors, admins, and developers themselves often become the weak point
