> I don't think people would be concerned about that explanation either... I think they need to hear real-world consequences
I think you're right. I'm not hopeful the general population will change and suddenly say "E2EE matters, dammit!". Because the small scale consequences are boiling the frog, and the major ones "could never happen to me".
I'm sure we've all seen the Google account that got nuked [0, 1], but pointing that out to people is likely to garner responses ranging from "But I need Google for $thing" to "I don't have kids, so I'm fine". We unfortunately don't have any medium-scale fallout - just ghost stories of one guy, one time, being bitten.
[0] Costing the guy his phone number, photos, emails, contacts, any paid apps, documents in Google Drive, and presumably associating his credit card, address, and name with a banned account. Given how Google relies on automation for flagging and harassing accounts, I'd expect his troubles aren't over just yet should he make a new Google account.
[1] https://www.theverge.com/2022/8/21/23315513/google-photos-cs...