@PeterJ If, based on your instance’s domain, you’re based in Australia, then you are, sadly, right. Very few human rights are enshrined in the Australian constitution to my (albeit limited) knowledge.
However, in the EU, privacy is a human right protected under Article 8 of the European Convention on Human Rights.
https://www.coe.int/en/web/compass/european-convention-on-human-rights
Furthermore, people who have their privacy violated as a matter of course are the victims here. Instead of victim-blaming, we should be addressing the crime.