What part of opt-in advertising IDs is only lip service to privacy? Seems entirely about privacy and very little about security. Similarly, iCloud Private Relay is completely privacy focused and isn't really about security at all. Both of these things provide real value to consumers and dramatically limit data collection as evidenced by reports from Facebook and many others in recent quarters.
NSA data collection isn't anywhere close to equivalent to private companies storing it. The NSA programs could be shut down if the political will existed. Private companies with all of this data have absolutely zero oversight under US law at the moment.