By "opt-in", surely you mean I'll be asked before data hosted in my accounts or pertaining to me is shared? If that's the case then I don't see anything wrong

By "opt-in", surely you mean I'll be asked before data hosted in my accounts or pertaining to me is shared? If that's the case then I don't see anything wrong with CISPA.