Let's be real here - privacy by default is how it should be. It would behoove all of us to stop blaming the victims here, which are the people being gently squeezed for all the information possible. Having that header on by default was the sane and reasonable choice.