USA entities tend to think that terms like "privacy", "security" have same meanings and assumptions across the globe, and that the USA laws are universal. Maybe they also think that entire world is just as dumb or dumber than USA.
For a start, you should consider this fact: Privacy for a bad actor goes directly against the security for citizens and good actors.
So when you talk about privacy you are making an assumption that it is contributing to safety. But for whom? Bad actors or good actors? Without such qualification, you are just talking lofy-sounding but meaningless ideals.
If you don't like privacy, publish your bank card number and cvv in response to this message.