Interesting question.
Steps we CAN take, if we wanted to do it right:
The "technological elite" can build better encryption mechanisms (with open specifications) and begin implementing them by default in communication programs, preferably end-to-end such that the message is never encrypted using only the remote server's key.
Everyone else can educate themselves on encryption methods, at least at a basic level. We can all learn how to see whether our banking webpages do a push request with our plaintext account numbers in them over an unsecure connection or not, and why that's bad. We can write to congress critters and vote based on candidates with a privacy-respecting background.
Steps we WILL take, because no one cares:
Continue with the status quo, grumbling about it but not forcing change.