That is assuming the market cares about opting in and security. Since their customer is a business that needs information on you and not you directly, I'd say it doesn't. The pressure to change will need to come from elsewhere.