It is this simple...
While government powers are regulated and transparent, the "The Innocent Have Nothing To Fear" idea is defensible and can be accepted by the majority.
When oversight and accountability is replaced by "Trust Us We Are Doing This For Your Own Good" it can be expected that the majority will either choose to adopt more secure practices or have secure practices thrust upon them as more and more services implement them as minimum best practice.
But there is also the electorate's role in this - if we keep expecting our security authorities to be prescient and assume that the hindsight of post-incident analysis can become the foresight of predictive data analysis we are creating a narrative where the only way security authorities can meet our wildly unrealistic expectations is to go deeper into vaster volumes of OUR data. We, and our governments, have to accept that there are limits to what can be predicted and invest more into thinking of more intelligent prevention and mitigation measures.