This is a total fail. OPSEC is a 5-step process, not a list of apps to install. This isn’t OPSEC it’s basic digital hygiene with a misleading label. Real OPSEC involves identifying critical information, modeling adversaries, and applying targeted countermeasures. That’s nowhere here. “Threat modeling” is mentioned in passing but never explained. There's no framework, no discussion of attacker capability or behavior just vague “think about your risks” advice. Tools are thrown out like candy (Signal, VPNs, Google Drive) with zero context or tradeoffs. There is no mention that VPNs can leak or that Google products are a terrible choice for anyone facing real surveillance threats (or not). Worse, there’s no talk of emissions control, no browser fingerprinting, no SIM/MAC leaks, no metadata exposure. For journalists and activists, that’s not just a miss, it’s actually dangerous. And it’s all theory no real-world examples, no case studies, no mission-specific thinking. The whole thing treats infosec, OPSEC, and digital safety like interchangeable terms, which just confuses people who actually need to understand the difference.