I guess it depends on the individual’s threat model. If government is the primary concern and they are a UK person, then maybe not. If it’s their employer or random hacker then maybe so.