Two new surveys separately shine a light on a security issue technology can’t easily patch – users who don’t follow the rules.