As usual, we need laws preventing gross (in every sense) invasions of privacy. Building new apps that aren't evil still allows the evil ones to exist. Targeted advertising as a whole should be eradicated.
Laws don't seem to work when it comes to Meta, Google, et. al. They just do what they want anyway.
Truly - how is this not data theft?
Because you "technically" agreed to it in the 5000 words long terms and conditions, you also agreed to the clause that says they can change at anytime.
Maybe limit the contract that a person (who is not a professional in the subject of the contract) can sign to 200 words. Anything past the 200th word doesn't exist even if you sign it.