That's a really short list of companies, though! There are a lot of companies that each independently hold a ghastly amount of information about random people that have virtually no meaningful controls over this stuff. "No meaningful controls" is the norm.
I'd also say it's the norm among most Fortune 500 non-tech companies.
Even the very largest adtech firms don’t have messenger apps used by millions of people, social graphs of the population or control of large swaths of the internet infrastructure.
That’s not to say I disagree with you, but the data collected is (to me) orders of magnitude less sensitive.
I'd also say it's the norm among most Fortune 500 non-tech companies.