Security education is noisy, paywalled, and tool-driven. We flip it: first principles → labs → defender empathy.