I've been thinking about this lately. It would be difficult, but I think legislation against this scenario should be an immediate concern.

It's like Snapchat; the whole premise of security disappears when the user realizes they can take a screenshot.

A company can go bankrupt and sell off all user data, in raw form or otherwise, regardless of the agreement under which they collected it.

Huh.