That depends on your threat model and your audience. If you're building a typical e-commerce platform, no, it won't. That's why the recommendation is so watere

That depends on your threat model and your audience. If you're building a typical e-commerce platform, no, it won't. That's why the recommendation is so watered down with "if reasonably practical" and has entire sentences dedicated to "it's OK if you default to Yes, but please give them a choice". But if you're building the next Silk Road? You should default to opting users out unless they check the opt-in box.