People also tend to have very poor OPSEC which undermines their efforts in spite of the tools they used.

https://grugq.github.io/blog/2013/11/06/required-reading/

Unlinking one's identity from one's activity is only getting harder as surveillance gets more and more pervasive. Effective OPSEC essentially turns one's life into a living hell and it's only getting hotter with time.