Website owners can simply opt out: https://docs.google.com/forms/d/1h9I0TbN-H_1e85CqXYb1ng7rQfg...
Phishing Exercise #16,777,216 -- THIS TIME IT WILL VALIDATE. YES.
The link was in the article. I agree that it’s hardly a great way to create an opt-out system.