We are not past the point at all. Any democracy can ultimately decide on laws and regulation. Why would you wish to insinuate otherwise here? California could easily decide to not implement such laws, for instance.
That data leaks out is always a given. So, gather less data. Ideally none. But this is not a discussion about data. This is a discussion as to what state actors think they are allowed to do. It is an attack on private life of people. See the combined strike against VPNs.
We are not past the point at all.
I can only hope you are correct.
Please remember that there are CA state policies that the voters voted to overturn (in a referendum) and the current CA state government refuses to do so. California voters decided. The California government un-democratically decided to ignore the voters against their own laws they themselves passed.
PS I'm referring to bail reform here.
PPS Just trying to frame what the CA government thinks its allowed to do which is apparently anything it wants.