If we want to accept that privacy is important and valuable then we need to accept that it is not okay for our industry to continue to do what it has been doing

If we want to accept that privacy is important and valuable then we need to accept that it is not okay for our industry to continue to do what it has been doing. I challenge you to give me an example of some "demonstrably bad" effect caused by "avoiding recklessness" that isn't the direct result of shirking responsibility. To go along with your devil's advocate argument: I could argue that "taking extra measures to ensure the security of sensitive data" would have been "demonstrably bad" for Equifax. But don't you agree that it was extremely irresponsible of them to not do that?