The comment about personal responsibility is more representative of why I don't especially feel sympathy about this stuff on an emotional level anymore. We've had multiple, huge, public data breaches in years and the average citizen does not care. Hell in Australia we have some of the worst data privacy laws in the world. I wrote my member about it and only know one other person who did. The "personal responsibility" thing isn't a comment on people not reading the T&Cs, it is a comment on them letting the entire industry get away with this shit time and again.
The fact that people on the whole don't seem to care makes it hard for me to feel a good deal of emotional sympathy when it bites them at this point, even if I do feel they shouldn't have been bitten.