I have this argument with my wife every few months. She posts things on a popular social media platform and sets them "private" in full expectation that the content will only be shared with those she selects. Then she gets pissed when she later discovers the privacy settings didn't work the way she expected.

Anything pushed to the internet should be assumed public unless encrypted using open source encryption tools you completely control in a safe zone (like in Tails). All internet activity should be assumed to be logged somewhere, somehow. I don't even 100% trust Tor.

"I just don't do or write anything on the internet I don't want tracked back to me."

That's a rather Orwellian statement ...