I agree with you in 100%. I just want to address, that the 99% of the users don't care about privacy and security , not even a little, Otherwise the whole WWW would be https and people would be extremely concerned about the practices of google, not talking about what facebook does.