Of course CCTV has flaws, but for Ma and Pa shops with their own setups it's unlikely to be pwned by someone running facial recognition trackers or what not.
The outrage still is about the whom not the what. Most people are completely used to being filmed, what they're not used to is the data being sent to an organisation that is genuinely very, very good at processing data. I'd be surprised if most governments had data analysts and storage systems half as good as Google.