Privacy against widespread surveillance implies protecting yourself which is always extra work. While it is not a blocker it does demand additional resources to match the convenience (which also lack due to the current economic incentive to surveil).

There are exceptions, sure, but not the rule. What's easier, connecting directly to an ISP or have to use a VPN or Tor?

Privacy is also an asymmetric battle in favor of the attacker, it costs less to attack than to defend. One link broken and the privacy chain is broken. You can't undo the spread of information.