Blaming users who were mislead and are being exploited is not exactly a constructive way to approach things. Nothing is really anonymous if you look hard enough. Even with a fake profile, VPN and throwaway email your unique browser footprint and data broker lookups will probably identify you. Let's place the blame where it belongs, on the company.

I'm trying to convey that the whole story of a "free, open, $whatever_virtue" is a lie and the people who tell it are universally trying to get something out of us with the lie.

This line of reasoning takes one in short order to RSA-over-shortwave, which I really think should be more top-of-mind, especially for the weenies who dicker over which native chat app is more secure (an argument that makes me worry my eyes will get permanently stuck in a rolled-up state).