These should definitely be opt-in, however (I don't use the badge), and I would definitely argue that the way they get on the accessibility list is deceptive at best.

I would say that notifying the user on how to do it through the security panel is the legit way to do it.