Right now the average user does not care at all about security and privacy except the small niche groups of us on HN, Reddit and other tech/Geek forums. The regular average user will continue to still use Facebook, Twitter, Google, Apple etc. As long as the average user keeps using their services and vote with their data and wallets I doubt much will change anytime soon.
Until we get some real data privacy laws and regulation we just have to matters into our own hands. I don't use Google search unless I need to, and always have my VPN on (Mullvad).
Edit: Then again, once we did get data privacy laws and regulation could we actually trust the companies and politicians and LE. Probably not. That's why I also feel the laws and regulation needed for tech is more of like a "The public thinks we did something" type of situation. There will still and always will be under the table deals.
If the regular user can realize eventually how they feed these companies with their data and what happens with their data it could also hinder or start to hinder data collection at the government level (NSA, GCHQ, Project Raven and so on).