the problem with FOSS and security is that the average end user will always prefer convenience over every other factor. nobody except total nerds will use your ultra-secure open source solution, if there's a proprietary solution that's 100x more convenient to the average end user the average person does not want to customize or modify their machines in any way. they simply want a device which comes out of the box in a way where it does what they want. the computer (or phone, or other smart device) is simply a tool, it is just a means to an end. no amount of talks about privacy will make the average person give a shit about it, because they think it doesn't affect them, since they have nothing to hide, right? the only way to make the average person use open source software is if you make it more convenient then it's competition, and no open source devs have the time to do that. the only time open source goes mainstream is when a huge corporation steals a piece of open source software, slaps a layer of propriteary spyware on top and gives it a big marketing budget (the Google method).