I don’t understand the purpose. Couldn’t they turn it on for all users? Do they need extra permission? Or they are just testing user’s behaviour on seeing this

I don’t understand the purpose. Couldn’t they turn it on for all users? Do they need extra permission? Or they are just testing user’s behaviour on seeing this so they could plan more intrusive thing?