Businesses like this always end up veering towards changing privacy policies to the worse.

And depending on your threat model, not even a good privacy policy is enough.