Don't give into the pressure. Toxicity for this often comes from cognitive dissonance or from a deep discovering sense that they were misled or being too excessive about their approach. Certain security/privacy actions come with spending money and time and people aren't often willing to accept that their money or time was lost.