This stance seems a bit silly to be honest. In my experience, smaller companies have much less structure in how they handle data access internally, as well as for security in general. Thus privacy seems actually better protected through control mechanisms there, perhaps a bit counter-intuitively though. Of course it depends a lot on the particular company.