Most of these people don't even know how the technology works. Enabling firewall makes them feel secure because it shows them a Green tick mark in a green circle. A file shred application is good to them (if they even care) because it shows an animation that feeds a file to a shredder and breaks them into pieces.
They are never going to agree that they can be manipulated this way. Oh, and some people feel website x is secure because there is a green lock symbol in the URL bar. Some are more secure, because the green bar is a bit longer.
Except when all other measures have been exhausted, we shouldn't be so quick to run to the legal system clutching our ban hammer with our perceived state of righteousness.
Another problem I often see (not here, just saying in general) is how false equivalence is constantly brought up. Oh, so we should just let companies poison food or build insecure cars or whatever. I hope that with user data we can be more reasonable in how we legislate it and at least try to realize the unforeseen costs on the "good guys" vs the "bad guys".