If you actually want to do something to ‘fight back’ then use proper crypto on websites you control and change any defaults to use HTTPS on websites you don’t control. There’s no excuse, it’s free. It took me about 20 minutes of fussing to move my sites over, and most of that was just fixing CSS to be protocol independent. After you’ve done some actual concrete steps to help communications privacy and identity verification you can set your twibbon and feel justifiably indignant.