Eh, the violation that hackers incur will tend to have a much higher impact (though lower probability) than others like Google though. Someone who has had their identity stolen will likely have more issues with hackers than with Google. You are correct about the breadth of privacy being violated “legally” but it’s only gotten that bad because of how little it affects folks day to day lives to the point they don’t really care (not defending it, just stating the observation). So, yeah, you’re more likely to be violated by Google, but if you’re violated by a malicious actors, it will hurt a lot more.

Both are bad and both need to be protected against. Both will violate your privacy and neither should be ignored.