If that was the problem, the government could just publish a registry: "companies that will violate your data and spill your privacy", broadcast it on public TV

If that was the problem, the government could just publish a registry: "companies that will violate your data and spill your privacy", broadcast it on public TV. And make the site display a warning upon opening it. That way people have the information and they still get to make the decision themselves.