> you wouldn't call a computer system that is mostly secure other than a known privilege escalation exploit secure, would you?

People do this all the time, regardless of whether or not they're right or wrong. "This product I own is definitely secure because the marketing says so, even if the CVEs prove me wrong" is a common sentiment online and in real life.

Not to play too hard on the computing-detatched normie stereotype, but this type of surveillance is bound to succeed due to their apathy. We've seen this play out in the US before, and it's always a shoo-in for the surveillance legislation. Security, privacy and fairness doesn't even cross most people's minds anymore.