The FTC really ought to take a leaf out of GDPR's book, and start fining truly punitive amounts: https://www.tessian.com/blog/biggest-gdpr-fines-2020/#:~:tex...

$150M for a repeat offense affecting millions of users is paltry.