I guess I'd argue that we as a society don't really want to do that, and if we as a society paid attention to privacy/security more then we'd force the companies doing this to stop. Or we'd force our government to pass laws that would stop it. But we as a society only have a limited number of hours in our day, and most of society just doesn't care enough to apply pressure where it would make changes. I think most people just don't see why it matters.
Those things are happening though. The GDPR has only recently come in and the average person is starting to realize how data collection affects them in ways like manipulating elections and data leaks. Until recently these privacy intrusions have only been a theoretical risk and most people don't care about theoretical risks until they become real risks.
I guess I'd argue that we as a society don't really want to do that, and if we as a society paid attention to privacy/security more then we'd force the companies doing this to stop. Or we'd force our government to pass laws that would stop it. But we as a society only have a limited number of hours in our day, and most of society just doesn't care enough to apply pressure where it would make changes. I think most people just don't see why it matters.