What I really wonder is whether disclosure of these sorts of leaks is selective. I suspect it is. The point being that in showing one or 2 cases, and then showing the system taking a retrospective action, gives the impression that we are being protected. I suspect that grindr has been selected as a sacrificial lamb (of little consequence - eg its not tinder) - and will possible be put through some legal process and appear to be made an example of.
If so, the news will have some headlines, and it will appear that the governance process is doing its job.
I don't think we are being protected though - it would be easy to pass legislation that made these sorts of actions illegal. What is being protected is the reputation of those businesses undertaking the collection. The cost is that we are kept in ignorance of how bad and systemic the situation really is.