“The SECURE Data Act lacks protections against "dark patterns," allowing companies to use manipulative user interface designs to obtain consent for sensitive data collection.”