TransUnion charges $5 to put a security freeze on the account. I cannot believe they are able to get away with this. How does this logic even work?

1. We'll collect all kinds of data on you without you knowing it. 2. Ooops, we've been hacked! 3. Pay us to freeze your account.

How .. what... in what world does this make any sense? How do we go about changing this nonsense?