Comment by rsln-s

Good point. This _should_ be illegal. And there is definitely a need for better data protection legislation, to protect consumers against exactly this power imbalance.