it is sort of funny that most of your examples of things companies "tend not to do" end up on the news fairly regularly.
big tech ignoring gdpr, ignoring or working around privacy protections, their technology being easily abused for stalking or harassment with no effort put into curtailing bad behavior, location data being bought and sold, etc.
i think the only thing from your list i haven't seen in the news in the last couple of months is employees of big tech doing break & enters.
(and this is all before we even approach the topic of data breaches!)