Regarding your second point, I think it's more that people don't care as much about privacy if the consequences seem to be low/nonexistent, and they weigh their

Regarding your second point, I think it's more that people don't care as much about privacy if the consequences seem to be low/nonexistent, and they weigh their interest in platforms like Instagram, TikTok, etc. more highly than the potential negative impacts of their privacy being violated. I know users of Instagram, Facebook, TikTok, Slack, etc. who will almost definitely never move to encrypted email because they like the platform and the community. Folks on HN and in the tech sector in general can have quite different experiences with those in the world at-large, and one's viewpoint on this will differ based on who's in your networks. I think it's likely if you walk down the street in Manhattan or LA and ask someone if they know what DRM, copyleft, or GDPR is, the answer will be no. But they will care if the music they have can't be copied/shared, they'll know Wikipedia, and they'll care if their information with Google can't be deleted or is sold to other companies.