If your in your 20's and 30's and not saving your guts out for the future by maximizing a 401k, IRA , and Roth, then don't expect much of a future.
Play crypto only with 'spare' money.
All good advice. But, I'd be concerned with someone who has "no investment vehicles" (as that means they have only cash), because the age to collect SS might rise between now and then, along with the amount you receive reduced, as we are in a debt crisis and need to pay it somehow, so some people are going to take cuts.
All my spare money goes into investing. I can heavily invest my income because I learned to, and still do, live well below my means, with 30% of it going into riskier assets like LEAPs (options contracts), because the projection is still a $2.5m retirement account by 65, so I won't have to rely on SS if it's not there for me by then (I think it's 67 1/2 now).
As far as my crypto goes, it's in cold wallets (I have $10k of SYSCOIN locked up because I lost the key, but that's another matter that I'll address if it grows more than that). My hot wallets aren't linked to anything, and I make decentralized swaps here and there between cryptos to gain more, or, make trades with a bullion dealer for gold/silver. I got what I have from exactly $0, but I did invest time in a grey hat effort to collect (as a group) millions of Stellar (now Lumens) from their 1000 STR (XLM) airdrop per email address, and having done blackhat SEO before, I had access to plenty of email accounts. So, I took that and put it into BTC, etc., and the rest is history. I didn't know at the time a couple of hours of organization/work would have led to such a great amount... but here I am. Had I known how to purchase Bitcoin at the time, I would've at least bought $10 worth and just forgotten about it. Somehow, it slipped under my radar until it was too expensive (but in retrospect, not) to take the risk.
But, if they aren't concerned with keeping cash only, then I shouldn't either. I'm not a certified CPA/CFP (though I could be if I wanted to take the time for that, with really no upside except an extra suffix to add to my name), nor their accountant, just looking out for their wellbeing... but if they don't seem to have a care for it, then neither should I.