but the argument I have nothing to hide except bank account passwords etc is hard to argue with
It’s simple to argue against: any and all data points are either potential threat vectors, or will in aggregate paint a better picture of the individual they pertain to, for the data’s possessor to use as they wish. A default-deny policy for data creation/access makes as much sense for individuals as it does workplaces.
The law locks up the man or woman Who steals the goose off the common But leaves the greater villain loose Who steals the common from the goose. The law demands that we atone When we take things we do not own But leaves the lords and ladies fine Who takes things that are yours and mine. The poor and wretched don’t escape If they conspire the law to break; This must be so but they endure Those who conspire to make the law. The law locks up the man or woman Who steals the goose from off the common And geese will still a common lack Till they go and steal it back.
https://www.onthecommons.org/magazine/“stealing-common-goose”/