Text this: Even If Users Do Not Read Security Directives, Their Behavior Is Not So Catastrophic