I think this argument proves too much. It is true that most users don't care or even understand the security and privacy issues in the software that they use bu

I think this argument proves too much. It is true that most users don't care or even understand the security and privacy issues in the software that they use but that doesn't mean product developers shouldn't care. It is the precise reason that product developers HAVE to care because they in fact understand the danger (or should anyway) and should protect their users from them. I could just as easily say that "users don't care whether we hash their passwords in our database so why waste the CPU cycles" and I would be right. The vast majority of users don't know anything about storing passwords securely, but 1. They absolutely care if their passwords get pilfered and used to access their accounts. 2. We still have an ethical responsibility to protect people from dangers that we know full well can cause them harm even if they don't understand what those dangers are.