I'm expecting your exploit to be something like "automatically signs you into Google search". I don't like that sort of thing (in fact I use Firefox, mostly for

I'm expecting your exploit to be something like "automatically signs you into Google search". I don't like that sort of thing (in fact I use Firefox, mostly for moral reasons) but I disagree strongly with your general argument. The average person has their personal information known by data brokers. All using an insecure niche product does is add more attackers with their personal information. In addition technically-legal attackers constrain themselves a bit to not violate the law too much, whereas Russian gangsters have less incentive to restrain themselves.