I think this is a strawman argument here. Script makers have a an implicit (and explicit mandate in the EU) responsibility to be upfront with what they do. No

I think this is a strawman argument here. Script makers have a an implicit (and explicit mandate in the EU) responsibility to be upfront with what they do. No one will be happy if stripe or Google Analytics started including a bitcoin miner. In this example, stripe did not exactly disclose what they collected or how they use it at first. They did not provide a way to opt out. Now they do. It seems a diversion to compare this to someone hacking ELB and stealing data. Yes, all data can be hacked, just like how governments CAN warrantlessly wiretap you through FISA. It doesn’t mean we shouldn’t fight for 4th amendment when the government raids your house without a search warrant.