Because there's no law preventing it? Ideally there would be regulations making this illegal unless they get the user's consent at the time of purchase as well

Because there's no law preventing it? Ideally there would be regulations making this illegal unless they get the user's consent at the time of purchase as well as allowing users to opt out at any point thereafter.