What part of "cloud sync is opt-in" did you not want to understand? Appearantly all of it.

It does not matter if you think that the website does a bad job of explaining that fact.

Rest assured, that your sentiment, that no employee should be using autin (or any locally installed 3rd party software, really) before a proper audit of the code has been done is understood just by your first comment. A valid opinion anyone can hold.