I believe that sadly many users don't want to learn about security not even the functioning of their OS. They don't know and don't want to know about control panel, services, processes, ports, ...They don't want to be bothered with security alerts and should one arise they don't understand what it means. All there are interested in is googling, chatting, sharing, gaming, video streaming, facebooking, downloading funny stuffs and softwares,etc.
Recently I have installed CIS on the laptop of a friend. I was amazed, Vista and of course the softwares had not been updated for 1,5 year and the AV had been out of trial for ages! And I'm ready to bet that it'll be the same in a few months time. And it is just one recent case among others I've encountered.
When I talk about internet security to friends, they don't listen. It's simply boring them.
So unless all countries in the world request users to prove a minimal knowledge before obtaining internet access, and needless to say I wonder how to implement that, trust online will be a dream.