Aggressive capitalism coupled with user ignorance is the main issue. The advice still remains don't install all this shit, but people growing uo with smartphones have bought in to this idea that it's reasonable for Google to spy on your every move, so why not every other app?

So many users have no idea how their devices work - even an inkling - now what apps do, how to keep devices secure and private, and what happens with their data. Business has taken advantage of that - people want things to "just work" so business use that as a way to abuse users and make every app a trojan horse for data mining.

Even Google, Apple etc privacy settings are bullshit - they're just figleafs of psuedo privacy that enable them as the platform makers to dictate the terms.

I switched away from Windows to Linux on PC, and I use FOSS alternatives on my Android device (even considering replacing android with FOSS system - difficult with some work essential apps unfortunately). But even if you stay on windows/android there are plenty of things users can do to protect themselves - they just don't know how or worse can't be bothered by the whole issue.