I get that that's just the way it is now, but it really shouldn't be.

I go to a store in person, buy a laptop with cash, no information required. Why does this have to be different for anything else? I purchased a laptop from Framework, because I wanted a repairable/upgradable laptop. Why should they be allowed to sell my data, why do they need a record of the IP addresses I've used to access their website, or keep my phone number on file, and so on?

At least here in the US there is no control of how our data is collected and sold against our will (barring some protection if you live in certain states), and then it inevitably leaks and now we have to deal with trying to not get our identity stolen and or inundated with spam and scams. It's incredibly frustrating. From the consumer's point of view there is no "need" for this.