Here's court cases lost by Google and Apple
Also, whenever monolithic megacorporations not recording you directly, virtually everyone is still buying any data about you they can get from actual malware distributing criminals.
Microphone hijacking is real and commonplace. (Edit: Fixed link thanks to some feedback.)
The malware vendors sell what they learn about us on black markets. And in net effect, everyone is buying from them.
They "Privacy Wash" the things they learn from the illegal recordings, by passing them from one disreputable broker to another. Each broker can keep poor quality records of exactly where they got their data. Pretty soon it's just "part of your digital fingerprint" and "can't be helped".