While that is true - a consumer must take action to protect their individual information - it may be that if enough people do this that the cost of compliance (responding to the ccpa requests) will make it less profitable to hold on to a consumer's information.

There are also lists with links and contact info of important businesses to exercise your CCPA opt-out or delete rights with like data brokers such as Experian, Epsilon, TransUnion as a start. Even ccpa email templates that may be easier to use rather than going through a form (not sure if they will work).

It actually is opt-in, not opt-out, by default. In order to do opt-out, a business has to demonstrate that their users are all above 13 and able to consent, which is a hard requirement that will force nearly all data brokers to do opt-in instead.

To completely stop collection is difficult. But the legislative will is clearly manifest, so it might happen.