Nobody seems to have yet picked up on tls 1.0 becoming obsolete next June for PCI purposes - about 20% of Web users can't do better without an OS upgrade - IE on xp, older android, etc. We've been measuring this for about a year and it was 24% this time last year.

Can't see that percentage dropping all that much before then, and clients won't be blaming users' poor practices or the pci council - it'll be the fault of Web developers, everywhere.