The default on is a favorite ad-tech strategy; its how a lot of websites gather customer data, since most users couldn't care less that they're always signed in

The default on is a favorite ad-tech strategy; its how a lot of websites gather customer data, since most users couldn't care less that they're always signed in, always sending browsing/tracking data to other parties. There is little regulation in online advertising; GDPR helped a lot but most ad revenues are still generated in the US. I have a feeling that some regulation would go a long way in improving the online browsing experience and prevent incidents like this, which can get tiring: every time a trusted internet company makes a privacy "error", everyone is outraged, we shame the company to getting better yadda yadda.