Security and privacy awareness are not wholly absent, and awareness, including among the young, can be high. The awareness is, however, highly uneven, and is quite problematic especially in how it's reflected among commercial enterprises and law.
As I've been saying for quite some time: Data are liability.
The other part to this is what can they do about it. Kids these days see riots responded to with military force. Cops kill people on sight and get off unpunished. People get imprisoned over enumerating URLs and we're trying to extradite a person to charge them with treason for revealing that the government is indeed spying on everyone.
I don't think kids these days are naive, I think they just see that trying to fight this stuff can realistically get them life in prison and/or killed.
As I've been saying for quite some time: Data are liability.
This is simply the home-security edition.