Seems like the advice to not use social media is still relevant but not quite enough (as photos can end up online even without your consent or knowledge via friends or family). And of course that doesn’t excuse the company behavior in the slightest, this isnt a case of blaming the victims.
We (USA) will have to figure out what we are going to do with digital privacy, though that means agreeing at levels of government that currently don’t like to do much together.