I think part of it is the public lack of understanding of technology. A layman won't understand the phrase "Facebook API allowed access to data" as opposed to "There was a breach".
The worst part of that is that a layman only "thinks" he understands what "There was a breach" even begins to mean.
But what/who do we blame? Is it the education systems staggering lack of ability to prepare people for modern, tech-enabled society in any sort of privacy-as-a-right context.
No one? We shouldn't be assigning "blame" because the public doesn't have the same specialized education that we have to understand the nuances of "APIs" vs "breaches."
I think what needs to be done is to create an easily understandable formulation of "privacy-as-a-right" and teach that.