You raise some good points about VTTs, but on the other side, I’ll say that it also provides some tools that can make an immersive experience easier. I DM’d the first time on roll20 and got really into it.
We were doing Phandelver and I made a bunch of custom maps to supplement the default because it allowed me to have different music for each map so I didn’t forget to change it for atmosphere.
I uploaded a bunch of custom .pngs for tokens and stuff on maps.
Made handouts for monsters and important NPS so the players had a better picture of it than the small tokens.
Sound effects for events.
You can set dark vision and view distance for each character so you don’t have to keep track of who can see what.
You can put AC and HP on tokens for players and enemies only viewable by the DM for easy tracking.
You can have tokens hidden on the map that only the DM sees and can change the layer when the trap is sprung.
It actually made my fist time running a game a lot easier and the tools enabled me to be more creative as I found new things I could do. Also, I’m bad at voices so I got a voice changer program and it was much better for them than my poor attempts at sounding creepy or scary.
So you admit they don’t have access to the knowledge needed to make better choices for their digital security. Then immediately blame them. I think your bias from the point of view of a one that is already more informed on this sort of thing. If they don’t know they need to know more, how can they be expected to do any research? There’s only so much time in a day so you can’t expect people to learn “enough” about literally everything.