Some of that is due to legitimately not realizing it can be regulated because the US is so dysfunctional on privacy that everyone has conceded the possibility. 

For those of us in the EU, it's less of that, more of How? And who is responsible? And what about other decentralized systems?