This still should not be the default, rather corps should have an easy about:config switch they can flip. The default should protect private users.