All of these are necessary and none are a substitute for one-another. And even in concert and combination, they are not 100% effective and never can be.
The fact is, there are people who think the ability to get beyond security measures is tantamount to the "right" to break, enter and utilize. That is the source of the trouble. And until those humans are addressed effectively, there cannot be any progress against the problem. And why isn't that happening? Should be obvious.
With government writing themselves laws exampting themselves from prosecution (and simply ignoring laws, and refusing to prosecute themselves) and business of every kind, everywhere "lobbying" [read: buying] legislation which enables them to legally circumvent personal privacy and security measures while at the same time criminalizing circumvention of playback control measures? Well the picture sure be clear enough. They can't easily go after anyone without potentially offending the people who support them -- their sponsors.
The establishment itself is the problem. The establishment problem is best addressed by a mob of rebellion. Start with simple things: MS Windows for work and Linux/BSD for home. I don't care which flavors of Linux/BSD anyone uses and variety is a great thing -- no one-virus/malware to rule them all. Similarly to "the truth" Open Source will set you free. It's simply harder and less frequent to get malware through in any consistent and predictable way. With Windows and MacOS, consistency and predictability is far greater.
We preach "defensive driving" in motor vehicle traffic. But we ignore it where communications, privacy and data flows are concerned? And of the two, which are presently more important? (Still a contest but it's not about which is "more" important... that's a matter of context)