I mean if a company doesn't care about protecting its users' data then any conversation about improving security is gonna be inapplicable to them.

I'd also suggest that companies being so blasé is a direct result of lacking regulation. If there was no laws about aviation safety I bet we'd have more airlines with lax safety standards and more accidents.