People may not know exactly what data they are giving away or the mechanisms by which is can be harvested and exploited, but they're constantly reminded that hackers/ corporations/ government have magic powers to find out anything they want to know.

So my argument is that most people figure it's a lost cause anyway and choose not to invest much effort in learning about computer security, relying instead on the legal/regulatory system to oversee that like any other complex public policy issue.