i suspect some if it is technical and some of it is social.
this might be a spicy take: but custodial nsec management might need to be an option to activate the normies.
socially, we need to recruit more communities one by one. (i've been experimenting there bringing over software devs and testers.)