You said "People need at least to know what public-key cryptography is before trying to use it." I think this is untrue. People really just need to know how to work with the technology, not understand what it's actually doing. Trying to explain the underlying principles makes it more confusing and thus, less safe.