> where people think "spying on you" is normal and can't be avoided

Normal people, yes, but this is exactly what tech regulators ought to be gunning for. Even post GDPR, we just don't seem to have enough bulldogs in enforcement...