Collection by intelligence/LE agencies and by private companies are increasingly interrelated. These are not separate problems, but two sides of the same coin.
I'm afraid you've missed my point, because I don't use those services either. No man is an island. And very few of them are OpSec masters, either. For instance, consider how unique that precise set of tools is, how easy it is to fingerprint browser extensions, and how you've effectively announced your identity in a public forum.
(Edit: Though doing that without JavaScript would be a pretty neat trick. I'm pretty sure it'd be possible to do if you can convince tags to load sequentially, so you can send requests to your server interleaved with requests for add-on resources, and observe timing. I'm thinking many levels of nested iframes ought to do the trick. But I don't know that for a fact.)
What I am trying to say is that this is hard, and we cannot solve anything by oversimplifying or victim blaming.