As a non-technical user, if it were to be simplified like Nutritional Information, I would expect broad categories risk that receive either a check or no-check

As a non-technical user, if it were to be simplified like Nutritional Information, I would expect broad categories risk that receive either a check or no-check for the possibility of exposure. IE: X Authentication X Financial X Communications X Property Or such, so I can be aware at-a-glance that my user name, password, credit card information, private messages, or personal documents may have been compromised. I wouldn't be over-informed into oblivion, or at least not as likely to be, if the information available were suitably informative-yet-terse. Like a nutrition label. However, that's just my pie-in-the-sky desire! Pragmatically, as a technical person, I'd personally be happy with regular release notes of product revisions, including SaaS products, and which are paired with a technical-oriented blog that details the notes in further clarity for the technically adept. The role of journalists can step in here, and appropriately severe information will spread much as it does now. The upshot is that technical folks like us may learn a thing or two via such an open communication. If everyone did it then there would be less fear to do it and there would be more information avaialable about common risks and their mitigations.