It's quite annoying to see this line of thinking coming from various Twitter influencers. While we don't know many details, it seems like Luke wasn't using a typically recommended setup like HWW + passphrase / multisig.