I wouldn't exactly categorize "everyone can see your data" and "we can now track your movement on our own site" together.

The idea of surveillance, in this case, is that no 3rd parties can snoop on your data. If you are actively using a site, it should be under the assumption that they can and will track anything you do on their site.