> doesn't understand the operation perfectly IS going to be black-bagged by their local black-ops group
More likely, they simply aren't noteworthy targets. If you rely on PGP to secure your emails, those emails will probably end up not actually secured, but you won't notice because your emails aren't valuable anyways and are probably secured by other stuff, like TLS, and Google's server security.
An interesting point of comparison here is git, which is also widely claimed to have subpar UX.
Every thread that mentions PGP will eventually devolve into a discussion about how it's a foot gun and mere mortals will blow themselves up with it...
... but it works.
Seriously though, I remember discussions in the mid to late 90s about UI/UX difficulties and about how every single person that doesn't understand the operation perfectly IS going to be black-bagged by their local black-ops group; the same discussions that pop up in every PGP thread.
It's like one of the oldest running jokes in CS at this point -- not that PGP is broken and failed but that it attracts tons of individuals to congregate and be upset en masse about the UX.