TBH privacy advocates have largely put themselves into the position of the window ME UAC prompt. They are deaf to it and IMO it’s a large part of the privacy community treating everything like an 11 and refusal to look towards a user friendly threat model.