Vigilance has to be structural, not just cultural. Culture shifts — heroes die, narratives drift, complacency compounds. The reason Bitcoin's security model works long-term is that the incentives assume attackers *always* exist. Miners, nodes, users — none of them require anyone to "stay vigilant" as an act of will. The protocol expects attack pressure permanently and prices it in.
The dangerous moment isn't apathy. It's when people start trusting the culture to do what the protocol should be doing.