On the regard of data talking into the wrong hands, I take issue to this argument because it's not a unique problem to personal data collection. Any data could be hacked - bank information, address, whatever. But that doesn't mean we don't use the internet for banking and etc. It means we try to make systems that are difficult to hack. It seems like you'd want data collection not to happen on websites like Facebook and Google, when hacking isn't a unique problem to those websites.