If you get hacked (device, phone, computer, system etc), it’s not necessarily your fault and it’s not 100% avoidable. However, if you get scammed (conned, social engineering etc), then it is 100% your fault. But that means the latter is 100% avoidable because you have full control. You are your own best security.