The approach to privacy seems to be blaming people for not guessing how to properly hide their private information from malicious actors when people are also expected to use that same data daily to interact with the world.
How about we actually punish the ones that collect private data without consent and those that abuse private data? Like actual prison time for CEOs of companies that do these things.