I absolutely agree that the marketing and branding around almost every service that either does (or claims to) promote privacy and security leaves a lot to be desired.

It's a hard problem, and a problem applicable to many domains. How do you communicate nuance that requires multiple years of education to people who don't have multiple years of education? I don't know.