The fundamental issue is companies dealing with out data when they should just be making hardware or software.

In the old days, computer companies made the hardware and government institutions used that to run the internet. This is how it should be. Companies should not be touching our data directly. They simply cannot handle the responsibility.