What do I tell the average Internet user about this?

Here: http://techdirt.com/articles/20100325/0403568713.shtml

And the offending appliance: http://www.wired.com/threatlevel/2010/03/packet-forensics/

I've got hundreds of clients who use the Internet, but are not - as we would say - Internet savvy. What do you think I should tell them (and what will you tell YOUR customers) when the idea that ANY government agency can spy on supposedly "secure" connections hits the mainstream? I have some ideas, but you, my colleagues and superiors frequenting HN, must have some more insight...