True, but that's at the discretion of the content author/publisher, not Cloudflare Turnstile.
It's the publisher that enabled Turnstile.
I don't think publishers have some sort of desire for their visitors to have their information collected by Cloudflare; they usually just enable it to protect their website from bots.