The Google Maps revelation seems like a staggeringly obvious but rarely thought about thing. If GDPR was required in the US we likely wouldn't even have to worry about this. But we have to think about not just opt-out but purposefully researching, tracking down, and manipulating default settings which will be hidden away by dark UX anyway.

The goal seems to be to enable as much storage (on-demand) needed for users' data as possible, whilst still allowing exceptions for anybody in a position of power over some people (authorities, governments, tech CEOs, etc).

And if you don't play the game you literally will not be able to live (conveniently).