Building codes are there for a reason. Have we had our equivalent of Tacoma Narrows or Triangle Shirtwaist yet? The event that Schneier said would be the "privacy Exxon Valdez"? Possibly the OPM hack qualifies as the latter.
Provided we get codes that recognise the difference between personal, small business, and large business, it won't be so bad.
You cite two examples against privacy, but not the EU (mostly) pro-privacy data protection rulings. Or accessibility requirements.
In the long term trying to preserve privacy entirely through guerilla action isn't going to work (see China), and it certainly isn't going to work for everyone, so we need to take advantage of the normal democratic channels to achieve the right changes.
Provided we get codes that recognise the difference between personal, small business, and large business, it won't be so bad.