Thing about that, Facebook is known to construct "shadow profiles" of people who don't have normal profiles, just to correlate all of the data they happen to gather on you from having their tendrils on half the sites on the internet. It might be better off to create a profile with your info just to turn off as many things as you can, and not interact with anybody on it.

Sane legal defaults are great and necessary, but not enough. Google has iffy GDPR compliance to begin with and has now been caught circumventing it.

Nothing will be effective short of jailtime for the execs responsible for flouting laws and public trust (not for making a mistake, but actually engineering workarounds).