I meant socially, as a tech community - I'm wondering how to strike a balance between "realistically, your information will get leaked, plan accordingly" and "but that doesn't make it okay".

Legally, or even on a consumer level, I don't see any kind of meaningful consequence. And the rate of data loss probably won't go down until that changes.