How many times with large companies have you found that they removed the old opt-out value and put a new one in that is enabled by default because of course it's opt-out?

Opt-out doesn't mean dick when the regulatory environment allows them to do things like the above without any recourse. Of course you can go to any other company that follows the exact same rules if you'd like.