Like everything else in security, there's a clear cost/benefit curve. It's actually dubious to make a distinction -- privacy is a form of security and its absen

Like everything else in security, there's a clear cost/benefit curve. It's actually dubious to make a distinction -- privacy is a form of security and its absence is a lack of security. To get what I call hard privacy online, you must use full isolation and onion routing. There is no other way as far as I know. But we could go a long way toward making mass surveillance harder, less accurate, and more expensive by just deploying encryption, low or zero knowledge services, and by educating users to change their buying habits to favor more secure products. It would still be possible for a determined well-funded attacker to track you when using these tools, but it would raise the bar and that's a start.