Presumably because most end users are in deep with the “if you do nothing wrong, you have nothing to worry about” crowd

I agree with other comments that this is probably an Executive issue. Decision-makers operating with incomplete information can make misinformed decisions. Whether or not end users actually are in that crowd is less relevant than whether the people making such decisions think the users are in that crowd.

In a game-theory framing, it’s a game with incomplete information. What you assume about others, including what you assume about their assumptions, influences your decisions. The sheer amount of players makes it a lot harder to model or predict.