I discovered that feature by accident while doing some testing with an iOS device, and found it concerning. IIRC it wasn't too difficult to disable, but it really should be opt-in.