People have been conditioned to ignore security. Too many big public incidents, too many emails telling them their data was exposed. They don't care anymore.

I think you're fighting an uphill battle here.