This is the heart of the issue though. Most users don't care unless you purposefully go out of your way to scare them with enough melodrama and dark patterns as to border on outright dishonesty. It's not an issue of them being informed, they just genuinely do not care about the risk when the actor is a familiar megacorp because their viewpoint is that if billions of dollars can't keep the data safe then it was never going to be genuinely safe anyway.