> Be patient.. It doesn't affect me on a personal level so it's not a discussion about idealism and having patience. What I'm describing is a symptom of faile

> Be patient.. It doesn't affect me on a personal level so it's not a discussion about idealism and having patience. What I'm describing is a symptom of failed and naive legislation. It's also an exceedingly slow legislature; the GDPR was finished in 2016 and implemented in 2018. Whatever the EU plans for it, it's already done. You don't need patience, you need acceptance. Per your comment: An often heard theme is that commercial entities should get ahead of the EU/other governmemts to stave off GDPR-like legislation. However this is not just naive to commercial operations, but also to politics: Once a government makes clear their intention to regulate a practice, businesses scale back their own plans to self-regulate, for the very simple reason that any solutions they would devise are now out of their hands. Whatever changes they implement would only be chance to align with the government's mandate. When we compare privacy protections invented by Apple versus those mandated by the GDPR we see extremely different approaches to the same problem, and Facebook's financials show that Apple's technological approaches have been far more effective, while also not projecting certain "protectionist" themes that are a recurring aspect of EU legislation (i.e. the politics side of introducing protectionism policies and mass surveillance while crying "won't somebody think of the consumers/children".) A final issue that I'll simply allude to is that many comments on HN are not just poorly researched, but absent knowledge of even recent events. Head in the clouds kind of stuff. Malware isn't hypothetical. Data collection corps such as Facebook and Google using side-loading to subvert OS-level protections/review processes isn't FUD, it's already happened.