I've observed something similar about HTTPS adoption: for many years many sysadmins and many Internet users thought HTTPS was absolutely essential to protect cr

I've observed something similar about HTTPS adoption: for many years many sysadmins and many Internet users thought HTTPS was absolutely essential to protect credit card numbers (which are not really very secret), but not to protect e-mail and messaging.