What also bothers me is there's a simple solution to all this. Just pass comprehensive consumer data protection laws and regulations all companies operating in the US are required to follow. But you don't see anyone proposing that for some reason...