> but they are also a huge vector for privacy-invasive ad-profiling Do they actually do this? Also don't most of the big ones allow you to opt-out of personali

> but they are also a huge vector for privacy-invasive ad-profiling Do they actually do this? Also don't most of the big ones allow you to opt-out of personalized ads. I like this because it's easier to have strong 2FA with backup codes on a few well protected accounts, than to do it for every tiny site.