Or on the flip side of that question: is it safer in the hands of the user, to be shared as desired, by explicitly opting in, or would it be safer in the hands

Or on the flip side of that question: is it safer in the hands of the user, to be shared as desired, by explicitly opting in, or would it be safer in the hands of a corporate entity?