Many of the things on this list are more or less technical requirements. Forced security updates are required to stop the spread of botnets, for example. If you

Many of the things on this list are more or less technical requirements. Forced security updates are required to stop the spread of botnets, for example. If you make security updates optional people will turn them off and you'll get botnets, ransomware, and DDOS flood epidemics. DDOS floods are a major threat to the open web, requiring web sites to cluster behind MITMing 'protection services' like CloudFlare. I do agree about the privacy aspects, but unfortunately most users do not care about security or privacy and "most users" (the mainstream of the market) pays the bills. Until users care and vote with their wallets, companies will continue to disregard these things.