> This is much like legislation around traditional weapons.

The problem with that comparison is that it would be very obvious and noteworthy if Nestle started to drop bombs or hired mercenaries to prey on villages who tried to fight their abusive water practices, or whatever analogous weapons fiction you can imagine to Big Tech abusing their data and resources for invasive spying. People would die and/or be injured, likely property would be destroyed--these are extremely tangible things.

Big tech could be using facial recognition for years and fly under the radar. Privacy is essentially intangible.