This is true... but it's also why we, as the informed parties, must actively push change. The 99% of folks who don't understand are going to be taken advantage of, and actively harmed, by privacy issues they don't understand. It's why the default needs to be the right one for consumers.