It is VERY much a "compromised but don't know it, or it doesn't slow down things or break enough for them to notice" territory.

The state of security is /awful/ for general users.

But they also can't figure out how somebody keeps getting into their email account, why they get text messages that quickly disappear from history, or what these weird charges that keep showing up on their bank statement are...