Opting out must be just as easy or easier than opting in.

Companies aren't being punished for it often enough (yet), that is true, but it's absolutely illegal.