I didn’t know this was a thing. Yikes. I’m gonna freak out now and find a way to prevent that in our home network.
And I’d argue that’s not clean business, the user doesn’t know what their connection is being used for :)
"User accepted T&C" is enough to get away with almost anything. It works very well for top IT companies. Upholding new business to higher standards would be unfair.