A lot of organizations just slather up their sites with all kinds of trackers and have
absolutely no idea what they are sharing and with whom.
It's an absolute dumpster fire that can only be fixed with legislation as the web is just not designed to prevent tracking in any way. There is far too much security "surface area" for a workable technical solution without re-engineering the entire ecosystem.
That legislation is of course unlikely because political parties, think tanks, governments, and propagandists all want to gather as much information as possible for their own purposes.
Literally every single financial, political, and social incentive points toward maximization of surveillance everywhere. I feel like it's pretty hopeless without something very bad happening and causing a huge grassroots movement that can't easily be ignored.