Fair point. I still don't think they've worded that well enough. I would probably not have read "By default" to have the context of "Unless asked to do so by authorities."

They're not being as transparent as possible in their marketing, which is at odds with their allure of security.