Like every other "free" financial product, they try to manipulate people into consumer debt. Oh and selling your data as a side hussle.
I’m not trying to be pedantic, but it’s important to be clear about the issue before you start proposing solutions.
If the government passed a law tomorrow saying that companies couldn’t share user data with third parties, it wouldn’t change anything about Facebook, Google’s or Credit Karma’s business model.
Not that I’m saying we need government intervention.