Data privacy isn’t to protect you from getting caught doing wrong things, it’s to prevent malicious actors from having the information to manipulate you. You don’t want phishers to have access to your life details that security questions ask about, even if each one is nothing to hide. You don’t want scammers to know where you went to school, who your teachers were, and what clubs you were in to build up a convincing backstory for their facade. You don’t want someone who wants to get something out of you to know who is important to you and threaten them. It’s not about having something to hide, it’s about hiding personal details from those with malicious intent