My take is that they are limiting their liability in case anyone is overly letigius, or if they mishandle the data. Yes, they could do the things you describe, but my guess is they don't want to get sued by people they are providing a free service to.