How do you even square these adjacent statements?
> even decent OpSec is hard.
> We've become such a lazy society
The plain and obvious response to our situation is that digital privacy and security should be opt-out, not opt-in. It's not as simple as adding a button that does nothing, but it actually is relatively simple for browser vendors et al to reverse their assumptions.
If you don't agree, are you knocking on doors and teaching your neighbors how to manage their security? I hope you've got a lot of patience.