Simply put: it should be opt-in, not opt-out.