By “leaks”, I assume you mean data breaches? I agree that data breaches (or leaks) are usually the result of bad security. But the concern for the individual is inherently privacy-related. When I share data breach news to my friends, the usual goal is not to show them that the breached service is insecure (even though that can be a byproduct). It’s to show, rather, that the personal data they give out can now be viewed by other people and that their personal accounts can be accessed as a result of this personal data being leaked. These concerns are privacy-related, even though their origins are security-related.
Additionally, “bad news” isn’t just data breaches. It encompasses a lot of things. Privacy violations from corporations still exist, like Bunq sharing users’ investments with others on their contacts list or Facebook wanting access to people’s camera rolls or LinkedIn tracking medical data.
There’s likely also privacy violations from your government wherever you are. I live in the US, so there’s been a few things coming up, like ICE monitoring neighborhoods without warrants or using personal data to target arrests.