Filled with malware, phishing and scams, does the web need a safety manual?

Web users are still making the same mistakes over and over again. How do we make it safer online?