It’s work though! Starting with users means not offloading the work of guaranteeing their privacy to them, which means privacy by default.
In turn that means you can’t rely on transparency and control since those assume user action (to read, to chose) and so aren’t “by default”.
♥ 3