there is also a long history of people giving up their personal data to get some (overall) irrelevant service and then being surprised when their data is missused...

Yes, but how much of that can be attributed to the service not adequately explaining what they are collecting and how they are using it to the users upfront, in a format that non-lawyers can understand?

Non-lawyers are very large and diverse group of people.

My mother does not understand where data is kept, what is encryption or anonymisation even if you darw it for her...

and if my father wants tp watch porn he’ll pop his CC where ever just to jerk off...