Class actions can be effective where the class members are relatively large, sophisticated entities. E.g. the data-breach class action brought by banks that is mentioned in the article. But in the consumer-protection space, we should consider alternatives. Where the class members are individual consumers, litigation ends up being lawyer-driven. Cases settle for pennies on the dollar of potential damages, and end up s…
There are also laws that mean you can't put whatever in a ToS and have it be a binding contract. If any clause is considered surprising it's void. It mostly fixes the whole "read this and click continue" insanity because it makes any clause that isn't law anyway unviable.
And click-through contracts are usually also void, at least in Germany.