I know perfectly well, from experience, that I could vastly increase my privacy (or reduce the huge volume of information that I choose or passively accept liability for sharing, eg by having a FB account and not logging out of it every time I go to another tab etc. etc.). But how much of my time do I want to spend on opsec?
I don't want to be in a defensive posture for the rest of my life, hiding from bad actors and constantly worrying about some overlooked chink in my digital armor. Frankly, if the future is endless low-grade cyberwarfare I'd rather be on the offensive and steal other people's data for my own advantage than be endlessly upgrading my door locks.