@aral On the other hand though, "just say no" and consumer education are also historically failing ideas.
In the infrastructure I build, I make sure that surveillance is just not a thing that would be possible (namely making sure you have to explicitly consent to user-content tracking you) - but this is just my small corner of the universe.