This, to me, is the most pivotal part. Data was stolen in relation to you? Too bad, so sad.

>Collecting data on users should be extremely risky, even if they consent to it's collection.

The problem is that it's been so normalised that it's become pedestrian. It's the new norm and no longer risky because "everyone's doing it".