The first point falls flat. It is as good as saying, earlier you could steal data, now you have to ask and respect consent.
Second may have some ground. But does seem shallow once you consider that in order to support small business you are opting to take away privacy controls from individuals. What ethical model favors the ability of small sized businesses to spend less on marketing over individual's right to privacy?
If you are starting a company with a very specific market, you might pay for your first customers more.