That seems awfully harsh, and I'm not sure why you're being so cynical. I am interested in working towards a better future, but no matter how dumb you believe I am, comments like yours definitely won't lead there either. In an effort to continue the conversation constructively:
I understand the power of connected systems because I've worked with distributed computing systems for the better part of a decade. The more servers the better in my field, and the more situations they can compute in (my pocket, a volcano,space, etc.) the better. I like my computers connected, but I also like them under my control.
There's a reality to swallow; my grandmother doesn't want to configure a server, or understand what a certificate or even a yubikey is. A truly universal privacy and security management system has to do better to make privacy accessible.
Context is important; my health clinic knowing my cholesterol level: important. My credit card company knowing my cholesterol level? Unnecessary. It's going to be important to categorize personal information and provide controls on access.
What if my government adds a new type of issued ID? How does a company efficiently request access to my "swolshon_id" and provide rationale for it's use?
Is a company allowed to reject services if I choose not to provide a portion of my user data? Alternatively could some requirement be to require companies provide services that operate with limited access?