Definitely agreed about making something like designing an encryption key per user account type of mechanism to force an error instead of a privacy violation.

GDPR requires this sort of "security and privacy by design" practice, but it's going to be a long time before there's any real widespread knowledge of how to do it, because it's actually really hard to do. I know developers who don't really understand that this principle goes beyond just 2fa and password best practices.