I don't think it's true that the vast majority of users aren't concerned.
The vast majority of users don't understand what is happening, and the few that are aware have decided that it's not worth the fuss, because they have correctly internalized that they basically have no real choice in the matter.
This sort of data collection is almost never optional, and when it is, the settings are deliberately hidden and obfuscated behind the worst kind of dark patterns.
If properly informed about what data is collected, and given a real choice about opting out, that doesn't reset every two seconds or hobble the service (what gdpr theoretically requires), I think the majority of users would be concerned and would opt out of as much as possible.
The vast majority of users don't understand what is happening, and the few that are aware have decided that it's not worth the fuss, because they have correctly internalized that they basically have no real choice in the matter.
This sort of data collection is almost never optional, and when it is, the settings are deliberately hidden and obfuscated behind the worst kind of dark patterns.
If properly informed about what data is collected, and given a real choice about opting out, that doesn't reset every two seconds or hobble the service (what gdpr theoretically requires), I think the majority of users would be concerned and would opt out of as much as possible.