This is true and false. It is good to assume your Wi-Fi networks are insecure, and I've done so for a long time. But the fact that WPA2 is not the lynchpin of your entire security plan doesn't mean that WPA2 being effectively nullified isn't a massive layer of security being ripped off.

WPA2 working correctly does not guarantee that you are secure, but WPA2 working correctly means it is much harder for someone to do something malicious. The fanboy crowd has leaned heavily on Google's push to get sites to use HTTPS everywhere as a reason to suggest KRACK isn't a big deal, but the reality is a massive amount of Internet traffic still isn't HTTPS, and more than likely, never will be.