I work in InfoSec and the problem at this point is I have to assume my data has already been stolen, it seems like every month there is another major company th

I work in InfoSec and the problem at this point is I have to assume my data has already been stolen, it seems like every month there is another major company that reports about losing the data of a several million customers. The problem is that there have now been so many breaches and data losses that there is nothing I can do as a customer that matters. It doesn't matter if I have a secure password, because someone else is going to store it in plaintext and when it gets leaked that password is no good. I can try using a different password for every website, but that doesn't mean much when it turns out the password reset flow has weak authentication and allows any hacker to reset it. At this point I'm thinking of scrubbing my online presence of everything and creating an entirely fake person online that does all my online stuff. But then when I've tried to do that I've run into unending blocks of companies trying to block people specifically from what I want to do. e.g. You want to sign up for a service while you have to provide a phone number, nope it has to be a real phone number not a VoIP number. You want to sign up for this site? You're not allowed to over a VPN connection. It seems like at this point were at a place were in order to use the internet you have to trust the companies with a bunch of your data and information to prove that you are a real person, whilst at the same time knowing that they can't be trusted and that they will sooner or later be compromised and lose your data. It's a lose-lose for those of us who actually want to use the internet safety and there really needs to be some teeth when these kind of breaches happen.