I never heard of a bank that got robbed and passed the loss on to their customers. If a bank is robbed, they know exactly how much was the damage, and how much they will be in trouble when they have to repay their customers.

Netflix can't "repay" their users privacy, can they?