The discussion and reporting on improving security and privacy of websites usually focuses on how a user can configure their account, since it’s assumed most people don’t have access to servers and settings that can make a difference. But I think there’s a fair amount individuals can do as well.
It’s a difference between what’s called in discussions of environmental pollution “point source” and “non-point source.” A point-source problem happens in one location and can be easier to solve. If a farm is using too many nitrates or has poor runoff control, it’s possible to fix that comprehensively and have a big win. But 10 million households putting excess fertilizer on their lawns that washes into water sources producing algae blooms is a lot harder.