What scares me is how few people take passwords, anti-virus/anti-malware, clean browsing habits, etc. seriously.

Without better end-node security, individuals and the entire internet are always at risk. (I'm primarily looking at you Windows...). In other words, IMO big government and corporate overreach are minor problems compared to the active-assault going on to dominate the non-technical end-user computers.