That was a disappointing response as well. Opt-out is better than nothing at all, but isn't exactly wonderful for privacy-related things. It should be opt-in.