Correct. They indeed do this in the name of security as announcing they do it for profit would probably be bad PR.
"We're doing it for your own good, pinky promise"