I think it's the idea of collecting them in the first place that most people are uncomfortable with. It's still a lot of trust to put in the hands of a private company. It reminds of the whole brouhaha with Apple and their CSAM privacy measures.