Mass market users almost never think about security or privacy models.

What's the last time you thought about the same-origin model, the fundamental model that underlies the web and modern apps' laws of physics?

The inductive willingness of less-savvy people to trust a security model is about iterative trust in people who are more knowledgeable than them.

An example inductive chain:

"My tech-savvy niece says this is secure, and I trust her."

"My security expert friend says this is secure, and I trust him."

"The expert I look up to read the white paper and believes it is solid."

Of course, in practice the indirect diffusion will have many many links.

This cascade of inductive trust has to be based on a rigorous reality to not be a house of cards .

Narratives that don't represent the underlying reality are kayfabe and might shatter.

But narratives that do represent the ground truth in a rigorous way (that is, as people investigate them closer, they become more convinced in the broad strokes of the narrative) are resilient and useful.