And the only way to opt out of it is to not use credit cards.
Is it somehow OK for someone to build a dossier on another person as long as they use that information for their own purposes?
Source, please.
https://www.google.com/search?q=Google%20buys%2090%25%20of%2...
The "90%" might not be easily sourced, but also not the crux.
Making things easier to find can be a threat - it's why there's a lot of compelling discussion around websites that take rosters of arrest records and post them on big scary websites along with pictures and lurid descriptions of the person's crime - offering to remove the information for a fee.
The US needs a GDPR-equivalent law.
It seems you're misreading the policy. See my comment above [1].