The mass-surveillance-based, creepy-stalker-but-at-scale business model of these companies ought to be illegal.

IMO we should try to outlaw that and see what happens, before legislating on the downstream effects. Might still need stuff like social media account age minimums, but... might not.