They should be forced to present both options, and the price difference must equal the revenue they actually make from spying.

Once again, I'm amazed some HN readers, like yourself, are unfamiliar with the basic tenets of the GDPR. (Hint: A company cannot provide a service on the condition that you provide unnecessary personal data or consent to spying)

If you work in a tech field, there is simply no reason for such ignorance.