You’re looking at it from a business perspective which is valid but the resources available to the average person to prevent and / or mitigate a realm threat are virtually nonexistent.
Up until now it’s made no sense to target Joe Schmoe or his neighbours what happens when a state sponsored threat actor decides to burn it all down, or someone decides to start targeting the average person rn Massé with malicious ai?
It’s not a big deal on a case by case basis but almost no cybersecurity company will help out an individual unless they’re rich, the police are brain dead.