Another common refrain, especially since Snowden, is just glib defeatism ("they already have all my info anyway") which is also a poor way to think about policy (and to make personal choices, but I won't argue those with most people)
I really think the main reason people are complacent is more often that the spying is abstract to them. They wouldn't like it if someone were pointing a big camera through their window, but data being aggregated through their phone and smart home gadgets and computer and CCTVs in public places and leaks on distant websites doesn't register in their actual attention, so it doesn't emotionally feel like a big deal to them