I think the impact here has been less with individual users getting better about security and more that companies and developers have been spurred to try and do

I think the impact here has been less with individual users getting better about security and more that companies and developers have been spurred to try and do something about it. For example let's encrypt might not exist and that's led to a huge amount of traffic moving to https. Or the rise of more easy to use encrypted messaging apps like ete encryption in WhatsApp.