It depends on your perspective surely? As a lawyer your job is typically to protect your client from legal risk, so if users are happy to sign a really expansive set of terms (which experience shows is the case) that gives grants lots of permission to do stuff with their data then that's low risk. If you as a business don't want that then you need to make it explicit that you're willing to take on some extra risk.