Remember that 'none of the above' is still a perfectly valid option, and is rather conservative: it's the status quo.
The privacy maximalist option is 'if you attempt to collect this information about your users, we will see you in court'. I would like to keep the status quo, which probably means that someone will have to start lobbying for stronger protections for users.
