When they send fingerprints (cryptographic hashes) of the content your watching isn't that "snooping" by definition? OK, they're not recording everything I say or do (probably) but their categorical denial is insincere and factually inaccurate.
If their claim that ACR is "opt-in" is correct it does give them some slack.
And just because everybody else does it too don't make it right.