That is true. We cannot expect a perfect reality with capabilities of surveillance technology.
However, last few years have shown here in Europe that it is possible to at least regulate what businesses do with the footage and personal data collected. GDPR - It doesn’t mean that an employee won’t do anything, but at least the legal entity for which he/she works is accountable and responsible for how this material is handled. And this employee can be fired.
This means that inside a business or organization it isn’t advisable to even talk about doing things with the data/footage. And it means there are legal methods of properly handling and disposing of it. And that is pretty neat, although it has been criticized and berated by anti-EU sentiments because it adds paperwork.
I’ve never been really worried about being observed or recorded, but after those 3D scanner things have popped up for passport checks I’ve become irritated. It’s obvious that there is unnecessary AI technology that’s sucking up all the available footage and extracting detailed information about me - beyond what is necessary for standard airport security. It’s not hard to imagine how an ML algo can be using this base somewhere out there to get all sorts of Minority Report style details.