Perhaps I am simplifying too much, but this problem does not seem complex -- but we have collectively made it complicated. People need to claw back their privacy one app, and website at a time. I have also made efforts to begin educating my family.
I have also connected my entire home Internet to a full time VPN end point that tunnels everything out. The VPN endpoint IP is changed every day at night (Trail of Bits -- Algo, cron and a bash script, and a good amount of battle with IPSec to make the gateway work). No more ISP super tracking cookies in my home. Everyone that is on the home network goes through is so it is easy for everyone to use (nothing changed on my home network from the end user perspective).
Consistent usage of privoxy. Casual browsing is done using Chrome in a docker container that is removed when chrome closes.
There are other things, but most of that has been over the last 6 months. It is a good start... But there are still a lot of obvious leaks. I have also been steering friends and family towards paid service with no advertising over anything where they are the "product".