I’ve been notified that my data was stolen/leaked on multiple occasions, Much of the information I consider sensitive was contained in those breached databases.
Most of the data on my devices is just copies of information held by my bank and doctor, etc, the US government, and various corporations.
I’m increasingly seeing “legit” email from known entities that contain single pixel tracking “web bugs.”
I sent a hostile email when I noticed a college alumni association using one.
I feel that analog equivalents are a reasonable starting point in terms of privacy. You can’t tell without physical inspection or a response from me that I have opened a piece of ordinary mail sent via the post office, for instance.
You can argue that the product is not perfect but it requires these type of oops moments for it to get better.
You can definitely make that argument, and it’s valid inasmuch as the company (a) actually says “oops,” and (b) works to take immediate action to deal with the issue.
My experience with Apple in these regards is similar to the person currently suing Apple over this very issue:
our past experience with Apple tells us that reporting this issue would involve months of delays, inconsistent communication, and in some cases, denying the issue’s impact entirely