Exactly. You do not need 100% or 95%. You just need enough to start changing the culture and landscape. Some of those people with industry experience but with values steeped in privacy and security will go on to educate (literally in academia) and mentor junior developers/engineers. It can be about trying to get enough support to change the landscape to create a feedback loop of a culture of developers/engineers taking into mind how their actions in a source file impact the end user's privacy and security.
