If you’re as sick as I was these concerns of privacy become minuscule because I probably would’ve been dead right now if I did not get my genetics 15 years ago.

I got my genetics from 23 and me and I’m well aware that they are using my genetic code for drug research. As far as someone getting my DNA you can pretty much get it for me anytime you want by following me around and taking a swab from a cup or whatever.

At least they genetics at 23 and me are anonymized. And I would think people can figure more out about you if they have your Gmail address then your genetics.

It takes exceptionally determined individuals and considerable effort to build and setup software and systems that deviate from mainstream "best-practices", for example to keep your data actually safe (in every sense of the word) long-term. These companies probably have their hands full solving their domain problems and running a business. Security is not mentioned as a main selling point on their respective websites.

Without a higher public awareness of data security, severe punishment for any breaches and failures to keep data safe, and a software ecosystem that prioritizes security much higher I feel you are right expecting the worst.