I hear this a lot, but I wonder if that is just because the only criminals you hear about are the not very smart ones doing crime on unencrypted monitored services. This sounds like a survivor bias situation. How can we know how many criminals there are if we only know about the ones we know about?