In general reading infosec news it might seem that everything these days is so insecure and vulnerable to the point where "if you have something valuable to anyone else they'll get it eventually" might seem to be mostly true.
On the other hand in real news on the individual level of hacks (not speaking of viruses and the like here) there's almost never anything apart from the occasional "dumb" hack with nothing more sophisticated than a guessed or fished password for instance, without any further effort giving the hacker access to a trough of invaluable data.
I don't understand this discrepancy, can someone with the know in the security industry say if anyone without "top secret" data or not being a VIP character even bother about the "concerns" raised in most instances, apart from following basic security practices, i.e. updating often, using strong passwords, not entering data to phishing sites?