Honestly? It can’t, really. There’s some very accessible things people can do on the user side such as good password management practices, but even something as “simple” as firewall rules quickly devolves into technical stuff that most people have no idea how to deal with.

The reality is that the Internet, computers, applications are all incredibly complicated. How they interconnect is incredibly complicated, and the vast majority of people don’t even understand what an IP address is, what the function of DNS is, what a MAC address is and how it’s different than an IP address, etc. So, you can maybe point them to a guide that they can follow to set up wireguard to access their music folder when they’re out, maybe, but since every network is different, how do you make sure they’re setting it up securely without copying and pasting routes that make them less secure? You have to understand what you’re doing to be able to see if in a specific use case you’re not causing an issue.

I dunno. This is a really tough nut to crack. There’s no “guide to learning cyber security.” If you know nothing and want to learn more, you just have to learn about networking, Linux, firewalls, active directory, everything.

If you’re looking for something incremental all you’ll find is incremental learning of specific things. Like, look up the LPI Linux Essentials study guide if you want to just learn some Linux stuff. Then spin up a bunch of VMs of different distros to play with, and look at some other Linux stuff. And more Linux stuff, until you feel like you understand Linux pretty well. But, that doesn’t make you good at cyber security… Because there’s so much more than just knowing Linux. So no, there’s no incremental guide for what you’re looking for - you just have to learn many things, and you can come from whatever direction you want to start from.

If you want to learn safely then just don’t expose anything to the Internet. Keep it all local, and yeah you might introduce some insecure setups or applications, but you’re not really under any more threat of network intrusion than if you never started. That sucks though because we want to access our shit from outside the house, right? But that’s the choice, if you want to stay more secure until you’re more educated. And yeah, honestly it’s kind of undergraduate qualification level to start understanding things well enough. Sorry, that’s just the reality I think.