Well, I implicitly meant to point out the pro by saying it can indirectly help increase security. But at the same time, there have been many many events that have shown massive insecurities in much of what we do in our online habits. Yet people, websites, and even large well-funded companies continue making most of the same mistakes, on and on and on.

I mean, facebook has implemented SSL a while ago (I think shortly after FireSheep got publicity), but they still don't bother making that the default login page, last I checked.

I certainly agree with you, these kind of things are almost necessary, the way society is now, for security to be increased. However, at the same time, society shouldn't have to be this slow at getting better security everywhere, and shouldn't have to depend on malicious exploitation as motivation.

It's pretty intrinsic to the nature of both humans and large collectives thereof, of course, so that's not changing any time soon.