I don't know how many times this is going to have to happen before people understand this: when you put something online, assume it is essentially public. Forever. If you don't want it to be public forever, don't put it online.
"Changing the rules" can reduce data availability, probably well enough for most purposes, and that's good. But it's simply strictly true that once you publish something, you cannot assure it's unpublished. And everyone should know this and act that way.
Opting out of the camera mesh being built in SF is impossible without moving. ISPs monetize our browsing habits, and a typical individual has no recourse -- common suggestions like a VPN just kick the can of trust down the road, and logless VPNs are usually proven to actually track you. Even if you didn't use any Google services, the adwords network is on the bulk of websites, and even with an ad blocker is a typical user expected to know that being logged in to Facebook means opting in to being similarly spied on nearly anywhere you visit on the web?
IMO it's reasonable to expect uploaded photos to live forever somewhere (even if GDPR obligates companies to do otherwise), but even learning how to opt out of the rest of what's collected where it's even possible would be a daunting task when undertaken from scratch that inevitably missed some key component and still resulted in being spied on and tracked. With that in mind, and given the scale of the problem, regulation preventing the most egregious of data-related offenses seems prudent.