The law locks up the man or woman
Who steals the goose off the common
But leaves the greater villain loose
Who steals the common from the goose.

The law demands that we atone
When we take things we do not own
But leaves the lords and ladies fine
Who takes things that are yours and mine.

The poor and wretched don’t escape
If they conspire the law to break;
This must be so but they endure
Those who conspire to make the law.

The law locks up the man or woman
Who steals the goose from off the common
And geese will still a common lack
Till they go and steal it back.

https://www.onthecommons.org/magazine/%e2%80%9cstealing-common-goose%e2%80%9d/

but the argument I have nothing to hide except bank account passwords etc is hard to argue with

It's simple to argue against: any and all data points are either potential threat vectors, or will in aggregate paint a better picture of the individual they pertain to, for the data's possessor to use as they wish. A default-deny policy for data creation/access makes as much sense for individuals as it does workplaces.

One of the great traditions of FOSS is its refusal to adopt that corporate visual design ethos which turns every logo into an abstract solid-colour silhouette optimised for mobile rendering. I like GIMP's plucky rodent, for example. A counter-example would be the sad [d]evolution of the Firefox.