I worked at an ad agency and we’d literally have every user’s email, name, phone etc in random spreadsheets that everyone had access to.
As an intern I had root access to just about everything on the company server because I was one of the people who “knew computers” who wasn’t a dev.
There was constant debate about how to trick people into giving over their data etc (e.g. email sign-up for some free crap that you never actually got). Or getting people to allow apps permission to access their contacts, as then you’ve got 100 new people, and enough info about them to get them to open a spam email.
Also, if the user fell for a trick, their details are suddenly high value, as they are dumb enough to be a “mark” (or maybe their English isn’t very good), so their stuff can be sold to scam companies or just scummy people.
Privacy is a layer of defence, and shitty people feel entitled to take it away from you.
“…root access to just about everything on the company server.”
The urge to set up a cron for a random time after my departure to sudo rm -rf / would be so strong.
Or a Python script that quietly swaps all the data tables’ values, so the aggregate information looks valid but is functionally worthless.