I think the main point is to explain this kind of issue to non tech people.
A bit of programming, but most importantly, general concepts required to understand this kind of issue should be common knowledge.
For me it falls in the same category as the people putting an IP camera to watch their son sleep and broadcasting it to the whole internet. This kind of issue should be understood by them.
In this case, if the "banking manager" was aware of how security works, the issue would not have presented itself in the first place.
A bit of programming, but most importantly, general concepts required to understand this kind of issue should be common knowledge.
For me it falls in the same category as the people putting an IP camera to watch their son sleep and broadcasting it to the whole internet. This kind of issue should be understood by them.
In this case, if the "banking manager" was aware of how security works, the issue would not have presented itself in the first place.