Realistically speaking, nobody cares about mobile security.

For IoT, well, who cares?

And it's been well-known that GSM/GPRS encryption has been useless for decades.

People just want a cheap pipe. If they care about security they can do it at the application level by, say, encrypting their stream.