B) The developers could have said no. If my boss got a contract with a bank that said I had to track users against their will, I would turn it down.
The point is that the newspapers are bringing up a legitimate problem. It's not a "panic", it's a valid concern.