Once upon a time, someone similarly pointed out that, if "they" wanted to improve vehicle safety, rather than mandating seat belts, air bags, and antilock brakes, they should just put an 8" long, razor sharp spike in the middle of the steering wheel---to make the dangers obvious.

The current state of data privacy doesn't even include the spike.

As you point out, education is a fine idea, but it isn't going to work if there is a major industry based on it not working.