This is a string of non-sequiturs that do not prove your conclusion.
According to haveibeenpwnd, my gmail address (which I too have had since invite-only) has been in 1 data breach. My Mac.com address which I've had since it was called iTools, 19 breaches. I've had to rotate my email account passwords I think 3 or 4 times over the last 20 years, and rotate most external accounts that use those email addresses a few times. I'm not sure what this proves other than "you should randomly generate your passwords & rotate them" which is what mainstream users have been doing for at least a few years now. Apple also notifies me if any password I use has been in a breach, and gives an easy link to rotate it.
SSN fraud predates the Internet and has little to do with online consumer services privacy (most don't have your SSN). When I was a young teenage cracker anarchist in the late 80s & early 90s, we got credit cards & SSN's through hacking the credit agencies, credit card companies, credit unions and regional banks (all of whom often had insecure dialup endpoints, or even better, insecure X.25 network endpoints), and through a BBS community that would disseminate these data breaches. Same as it ever was.
Mainstream end to end encrypted apps do not monitor your private messages. Cynicism is not wisdom. WhatsApp offering an on-app opt-in model to detect scans seems like a well thought through feature, though Meta's reputation is not good on this topic.
Clearly many do not care about privacy. But it is quite possible to be very online and have reasonable privacy. It requires discernment and discipline.