Since this is the place for the most serious discussion:

If US lawmakers focused on protecting American's privacy with some sensible privacy laws coughGDPR equivalent cough, we could avoid pulling out the ban hammer to play whack-a-mole on these companies.

Companies would simply be punished by the law for being malicious or irresponsible with your data, forcing industries to take privacy seriously and make investments in protecting and not leaking it.