> I understand the privacy argument, but that is not going to be enough.

Why not? Privacy is important to people.

For a long time, the majority of people didn't really seem to care about their online privacy. However, the EU still created the GDPR.

Perhaps a "real world privacy" equivalent of GDPR should happen at some point?