> Presumably because most end users are in deep with the "if you do nothing wrong, you have nothing to worry about" crowd I agree with other comments that this is probably an Executive issue. Decision-makers operating with missing information can make misinformed decisions. Whether or not end users actually are in that crowd is less relevant than whether the people making such decisions _think_ the users are in that crowd. In a game-theory framing, it's a game with incomplete information. What you assume about others, including what you assume about their assumptions, influences your decisions. The sheer amount of players makes it a lot harder to model or predict.