They absolutely are, you cannot have one without the other. The fact that these concepts are inescapably linked together is something many in tech have failed to recognize. Behavior that compromises your privacy will compromise your security (ex. ads are the primary source of malware), and behavior that compromises your security will compromise your privacy (ex. malware generally likes to exfiltrate your private data, and sometimes also track you and display ads). If a company chooses to violate your privacy, they are willfully compromising your security by default.
This doesn’t make logical sense. Ads are a source of malware because it’s a convenient way to distribute content to many people. Email is also a significant source of malware for the same reason.
A better example might be that excessive and unnecessary data collection by a system that gives you limited visibility over use and limited control, exposes you to a higher possibility of security incident. But that isn’t intrinsically true if the data is properly secured.
I tend to agree with the inverse; bad security is probably not good for your privacy.
So, ads are a source of malware because they allow someone to pay to take a trusted position: People trust Google not to send them to the wrong place, but Google sells the top result slot to the highest bidder (users can't tell they're ads anymore). This is ultimately why search ads are the king of malware, and email is kinda secondary.
There are other more clear links between bad privacy and your security. Consider the concept of opsec. Generally celebrities avoid people knowing where they're going day to day.
