After the scandal, they added an opt-out setting (but on the privacy policy page, where the nominal user will not think to look for it).