What you are saying isn't that depressing, I think it makes a lot of sense. But perceived abuses do take time for people to eventually take action that can actually effect companies/states bottom lines.

I can imagine at some point a 0day targeting iOS devices that when they connect to a public wifi network with a compromised router, it distributes CP malware/botnet on to their device and then everyone else that connects to that device in the future (muddying the waters).

Similar actions could also be taken against other companies and state entities systems.

And these actions don't need to rely on most of the population to take them.

The more these "kill chain" like systems become automated and cheap to deploy, the more incentive individuals will have to pursue these types of attacks.