That (on its own) doesn't mean that it's legal, I'd imagine. At least in the EU, doesn't GDPR prohibit such non-choices?