You know, one of the biggest problems I have with EULAs and ToSs is this: The contract is one way, despite the fact that one could easily see why it shouldn't be.
In short, the idea of EULAs and ToSs should be the idea that the company in question is creating an agreement between you and it. They agree to give you the service in question within reason (such as not allowing you to copy it, or being able to perform maintenance, yada yada) and you agree to obey the rules of this service. This also means that it is indeed a service then, that if it is a game being promised to you, and you have paid your money and created an account that you be able to have access to it so long as your account obeys the rules.
In addition, if you are supplying information, the privacy policy should also act as the agreement that yes, that company is indeed responsible for its security. This should be common sense, but as anyone who was victimized during the PSN attack, or is one of the many daily hacked Xbox account owners, etc. this doesn't seem to be the case.
TL;DR All companies with EULAs, ToSs, Privacy Policies, etc. need to recognize that those things require them to hold up their end of the bargain, not just the signers.