I think public perception is have already had numerous leaks (Equifax, yahoo, etc) without any real negative effects, so these warnings come off as alarmist.

It's a hard argument to win because a) its impossible to concretely attribute scams to a data leak and b) most people think they would be immune to scammers. Meanwhile, it's easy to point to the problems this would fix.