I don’t find it idiotic. It was the client’s decision to spy on its users. I have no sympathy for companies who make that decision.
Calling it spying is a little far-fetched I think, when the problem was the transfer ip addresses to US servers, not Analytics itself.