Rather, this should be opt-in from the start with serious disclaimers what it does and what it has access to.