The issue is that they trust institutions. Not because they think institutions are inherently trustworthy, but because they think that they are below these institutions attention. Reframe the threat in terms of petty bad actors exploiting institutional oversights.
The big tech companies are using AI to code now and it’s leaving big security flaws because no one can keep track of all the code AI churns out. Evil criminals, probably foreigners, who used to be too dumb for hacking can now use AI to take advantage of these flaws. They can use your data to figure out your online banking information, or they’ll use personal information to make Ai-faked blackmail material more convincing.