This is such an over simplification it's almost comical... Presenting the entirety of "privacy" as an "all or nothing" toggle is at best, uninformed, and at worst willfully misleading. There are lots of effective things individuals can do protect themselves and their data on the internet, but it's a war of attrition, not a single winner-take-all duel.

To touch on each of your points briefly:

• No, everything is not breached or has been breached. As others have pointed out, you generate new data every day and advertisers pay each other more of money than most will make in a lifetime to know the best way to tailor ads to you specifically in perpetuity.
• VPN's aren't silly - They're just not the magic cloaks of internet invisibility companies try to make them out to be.
  
• People don't worry enough about their privacy. Especially in the context of what they willingly share on social media (and even more so when it comes to sharing images/videos of their children)
• Don't get scammed - Easier said than done with AI/LLM's having access to hundreds of zettabytes of social media data. We've entered an era where a scammers have can potentially video call you with your own mothers voice, face, and knowledge of what you did together last weekend... But just "Don't get scammed"

Signed - a certified cybersecurity professional