Ballot measures are one way you take this on. You make it explicitly illegal for companies to have over data on users from your state unless a warrant is produc

Ballot measures are one way you take this on. You make it explicitly illegal for companies to have over data on users from your state unless a warrant is produced. This won't stop entities from tapping fiber or attacking companies and stealing data, but it does stop companies from just handing stuff over voluntarily.