The 23andMe Canadian settlement ($3.25M for ~affected users) highlights a structural problem: the breach happened via credential stuffing combined with the DNA Relatives feature. One compromised account exposed family members who never reused a password.
Genetic data is uniquely non-revocable. You cannot change your genome like a password. And your DNA reveals information about your siblings, parents, and future kids too.