> Don't they bear some responsibility for choosing a crappy 3rd party service?
Reminds me of this Mitchell & Webb sketch about identity theft: https://www.youtube.com/watch?v=CS9ptA3Ya9E
Weirdly even with no legal recourse/repercussions for the abuse/misuse of personal information, people still love shifting blame for it, whether to their contractual partners or even users themselves. Almost like they know what they did was wrong.