That's why for vulnerable/high-benefit target groups better be safe than sorry.
However you're right, the whole industry is driven by fear, and basically no news agency write clear and concise vulnerability reports for the regular Joe.
Yes, but let's be practical. I'm not one of these people, in all likelihood you're not a high ranking member of government either. The attacks we are vulnerable to are wide-sweeping well-known vulnerabilities that are trivially exploitable, untargeted, in a browser or in user installed software. These exist, but we can learn about them and know if we are vulnerable, then make the judgment for if it's within our risk tolerance & risk appetite.
Security is not an absolute. It must be informed by the real-world threat landscape, then modulated by individual risk on a case-by-case basis. Too many "security people" preach well-intentioned but incomplete advice.