Depending on site owners and spyware companies, like Facebook, to solve the problem is super naive, and will never solve it. They directly benefit from these "leaks," and so they have no motivation to prevent them.
It's not that they can't understand it, it's that there's plenty of other stuff to pay attention to out there, for better or worse. The threat of cold and hunger comes before more abstracted threat vectors, and you are extremely lucky to have the mental space to consider and discuss such things as privacy on this here website. If you want to ride high on your sense of innate superiority, accept for yourself the mission you seem to imply for the technologically-literate and make privacy so simple even a small child could be protected.
Legislation is used to protect vulnerable groups and health data. Strong reasonable legislation is hard to write, and expensive to enforce, but effective enforcement will cause changes to internet sites. Think GDPR.
It is hard to manage cross-jurisdictional issues on the internet. In this case, Sweden could probably design good restrictions since it is a site local to Sweden?
Trying to get everyone to become security professionals is highly unrealistic.