It is an entirely realistic scenario which afaik data backs up that most people don't change their default privacy related settings which Google profits from, but in case of actually setting their provided privacy settings ON, they do work.