Did occurring in 2015 happen to make it less bad somehow? We sure as hell weren’t passing laws to ban facebook back then either, so I’m not sure what point you think you’ve made.
Foresight? We’re talking about the present and the recent past dude are you okay or do you just argue in weird slogans?
We didn’t have the same stance on data privacy back then as we do today. GDPR wouldn’t be a thing for another year, not implemented for two more after that (2018). Legislators largely didn’t understand the risks associated with unrestricted exchanges of seemingly benign user data at the time. Yay for hindsight being 20/20.