> put up proper user protecting rules

That is a solution, but there's nothing simple about it. Obviously there's an even much simpler solution than coming up with what would be a very very complex set of regulations and laws, that would have impact across all the industry, and that btw tech giants would love. The really simple solution could be done tomorrow, without the need of figuring out what "proper" is in this case.

Not that what you're saying shouldn't happen, but it's a different battle that needn't be intertwined with this one.