So if I have this right... find publicly-traded infosec vendors who are selling customer data… put in some sell orders, then ‘out’ them.

Hah, I think it would be hard, it was clear what Avast were doing for years, but nobody really cared until the mainstream media picked up on it, and that seems hard to influence...

I have read nowhere they will stop collecting and selling user's data. I suppose they will create another company and continue doing the same.

Avast's blog post says: "I came to the conclusion that the data collection business is not in line with our privacy priorities as a company in 2020 and beyond." This *looks* like a promise to stop collecting any data.

Crazy, isn't it? And there I was wondering whether their strategy of sitting out the shitstorm would work. It *almost* did...