Businesses, particularly in oligopoly/platform scenarios, don't care about brand reputation. Just look at Meta - they don't even care about billions of euros worth of GDPR fines, it's all priced in.