Well, this point of view explains why people don't use Debian, and use Ubuntu. You won't educate users, and you cannot force them to read security advisories. We have to keep security advisories in the homepage (as I did it in my drafts), but IMO we also need to understand that lambda-users don't care about it, this is why powerul tools like APT exist (and we cannot change their mind, sorry). Regards, -- Grégoire.