>The only real solution is to have educated users that care about their privacy and security.

I don't believe that will ever be possible. Winning with technology seems like the only way to do it. Google wants even IMAP.