It would be trivially easy to add privacy any number of ways if they didn’t insist on tracking the users and logging that info.
They could even track it and just not make it available by web. Or require 2FA. Not exactly a nation-state level attack being described here.
People have just become accustomed to not caring about privacy and so that’s what we get.
Everyone complaining or saying leave but nobody talking about alternatives that solve some of the problems. Mastodon exists. Nostr exists. BlueSky kind of exists.