I don't know if OP would agree with that phrasing, but I would. The oft quothed Zuck line about dumb fucks trusting him with their info for reasons he didn't understand dropped nine years ago; if you still trust the devil that called you a dumb fuck for trusting him, that's certainly a reflection of your own flaws. We have a more general Zuck-agnostic flaw of sharing information with entities that could misuse it, whether or not they've called us dumb fucks yet. I feel like engineering solutions to this would be more clever and secure than legislative ones. It's not that I want a company that shares my private information to be fined, it's that I don't want them to have my private information in the first place.