I agree, but this isn't far off from the GDPR and similar laws that take the view that individuals aren't competent to decide for themselves what privacy policies are acceptable.