Good opt-in regulation doesn't exist currently - think of all the click-through legalese and cookie popups/gdpr consent popups etc.

We'd need something like a once in a lifetime registered consent that service providers would be required to respect quietly and provide non-degraded service to people without the opt-in.

Even this would probably require multiple rounds of regulation iteration to fix the loopholes.