India's ongoing outrage over Pegasus malware tells a bigger story about privacy law problems