Why Web3 Security and Seed Phrases Still Trip Up Even Seasoned Crypto Users