"Yet no matter how much people say they care about privacy and security, (or insist that they do on the internets), in practice, they just don't put their money where their mouths are."
Some people still take security seriously. When my daughter started a new job a few months ago she was issued with a company laptop and phone. The laptop was all set up with a VPN (she lives & works about 200 miles from the office and spends much of her time on site) which is used not only to access the office computer networks but is also used for conference calls. I've no doubt its drive is encrypted. And the phone is a BB of some variety. But then she handles a good deal of data which will be subject to a whole series of different regulatory regimes.
Whatever the mass-market might want there's a serious business need for devices made where security is taken seriously. There's even a possibility that the mass market could flip and make security a must-have; NSA & GCHQ are doing a good marketing job in this respect.