I don't mean it as condescending. Most people are not aware of how they private information is stolen all the time. Before the GDPR, I think most people weren't aware that cookies were used to spy on them.

Let's take another example: harmful chemicals. Most people aren't aware that chemical X or Y is harmful until it becomes a scandal, at which point the companies switch to another that also hasn't been tested long term. In that case, like with privacy, I don't think the people are at fault. People assume that companies aren't going to abuse them.

That's why I don't agree with 'Obviously if you are sharing an account nothing is "private". Doesn't this go without saying?'. People have some expectations that sadly don't reflect reality, so in cases like that they need explanations.