I agree that the definition of "work" has changed over time and I'm not trying to be pedantic so let's get to the point, does it matter if it's considered work or not? The real issue most people would agree with is the bad guys are extracting tons of value through the actions of their users. Should those users be paid? The answer is: it depends.
In our current system we would create an organization that can generate money by holding the tech companies responsible to pay users when it is deemed to do so. Unfortunately I don't see the money amounting to very much unless laws change drastically since even class-action lawsuits for leaked data provide very little. I'm guessing that measuring "phone work" would amount to micro-cents regardless of value directly generated.