It is creepy and a valid cause for concern. However, one of the redeeming features of a hardware token (vs. a phone app) for contact tracing is that eventually,

It is creepy and a valid cause for concern. However, one of the redeeming features of a hardware token (vs. a phone app) for contact tracing is that eventually, the battery goes dead and the token is useless. So even if you forget to deactivate the token after the 'all-clear', within a matter of months the entire network goes dark. To clarify, it'll probably be a small miracle if the 1000mAh battery in the token lasts a full year...probably more like 6 months is a realistic lifespan for the token absent a battery replacement.