Credit card transactions also aren't protected from marketing tracking activities, neither are Twitter or Facebook ads, neither is what my isp can discover from my dns requests, cell phone providers can sell my location metadata, and the credit bureaus are ordinary businesses with huge data leaks.
This is public information, police can operate on it without a warrant, and whether we're driving, flying a private jet, walking in a town square, or purchasing a coffee, or browse the internet - other private entities can too.
LifeLock and identity theft protection are sold to everybody, tax forms allow anybody to try to use someone else's number - the government refuses to do anything, and companies have minimum privacy + security requirements.