I disagree. Users may not care about security in the same way that technical people do, but they do expect the data on their phones to be private (nudes, in particular). I think the reason why the current situation is generally accepted, is because nobody has exploited one of these vulnerabilities to extract user data on a large scale, yet.