With the emergence of new technology and widespread internet access, it has become normal for young people (ages 11-18) to have an 'online life.' Social connections, leisure, education, shopping, and relaxation are now increasingly taking place online. While digital access offers many opportunities, the constant evolution of technology has also amplified online risks and harms. Yet, online safety education has not kept pace. Schools, parents, carers, and even professionals working with young people often adopt limited or resistant approaches. This paper draws on three large-scale surveys conducted over the past five years (combined sample of approximately 20,000 young people) exploring online risks, harms, and the provision of online safety education in schools in England. The findings reveal that online risks are on the rise and that vulnerable young people (e.g., those with special educational needs) are also more vulnerable online. Such vulnerabilities tend to override existing safety measures, while parental monitoring and school-based interventions remain inconsistent and rarely inclusive of individual differences. In schools, online safety education is not embedded within the curriculum. Instead, it is delivered through isolated sessions that young people often describe as "boring" or overly rule-focused, offering little opportunity for dialogue. Parents also tend to reduce involvement after age 12, just as risks evolve and autonomy over technology use increases. By contrast, continuous parental dialogue and positive mental health support appear to play a more influential role in promoting online safety. In conclusion, while most young people regularly encounter online risks, resilience varies. Online safety education should therefore be grounded in scientific research, designed to accommodate individual differences, and focused on building digital resilience. It should move beyond one-off sessions and be fully embedded within school curricula—and reinforced at home by parents—to meet the realities of young people's digital lives.