https://en.wikipedia.org/wiki/Room_641A ... Then, years later every one acts like Snowden had some big reveal.

There is the old password for candy bar study: https://blog.tmb.co.uk/passwords-for-chocolate

Do users care? I would posit that the bulk of them do not, because they just dont see how it applies to them, till they run into some type of problem.