The vulnerabilities of the plain old spinning disk meter may have been bad but they couldn't be exploited remotely from someone else's house.

Yes, granularity of the measurements IS a problem. If these things only reported the readings when I pressed a button, I would not be so concerned about privacy (that is if the companies could prove to me that the meters did not report the readings outside of these times).