By locking your credit however you are denying them the future business of selling your credit profile. Think if everyone did it.
But yes it's completely outrageous - you have to pay someone you didn't approve of having you data in the first place from giving it to another party likely did't approve of also having it.