Before this can happen, there need to be better awareness / education as what "good" crypto is. For example, why bother hashing p/w's if you're not going to sal

Before this can happen, there need to be better awareness / education as what "good" crypto is. For example, why bother hashing p/w's if you're not going to salt them. Why bother doing anything at all, if you're just going to use MD5. The problem with saying "encrypt all the things" is that guite a few devs will either do it half-assed to get their product out there and use crypto as a "feature", or want to do it right and aren't quite experienced enough to make the right choices. Crypto is good, but you have to do it right.