What can normal people even do against that? Bear spray doesn't do shit against a tsunami.

It's gonna be truly dope when the biometrics get out. You can change a password but if Google or Apple leak your fingerprint...

and I know that Google and Apple don't "have" your fingerprint. They have a hashed cipher of markers of your fingerprint. But nobody realized Sony was storing user data and passwords in plaintext until it got out and I've seen no reason to trust either organization implicitly.

Eventually, there will come laws for improper data hoarding and breaches of secure information. There will be civil and criminal penalties for mishandling sensitive data - I mean, if you forced anyone that works with credit card or social security numbers to be HIPAA-compliant you'd see an instant sea change. But this will not happen until it is too late and there has been substantial damage done, and our legislators will fight it tooth and claw, democrat and republican.

And the NSA will still get it, and the NSA will still leak it, and we'll be right back where we started except the lawyers will be rich.