So, people are worried, but evidently not enough to actually do something about it. The answer is simple, secure e-mail is too hard. I made it work, even before we started SHYM in 1998. Unfortunately, I am not the typical user, and neither are you. To make secure e-mail work, it's got to be transparent.
Press send and it's done.
No configuration, no changing the user experience, no anything but what the user is already used to. So simple a child can do it. Today, in order to send a secure mail, the user must first get a digital certificate. Then they need to make sure they have the right defaults selected. Scarily enough, this is actually a simplified version of what needs to happen.