Would having a "license" for companies instead of individual devs make more sense? Imagine Google losing its license to use personal data to target advertisements - this would make them much more sensitive to protecting their users from malicious entities.