I think people underestimate how much of this is intentional. We see the internal docs leaked constantly showing the legal team will review something absolutely heinous and just go "ok ship it." Like internally these companies are aware of the massive risk, and just don't care.