It’s a consent violation. That always warrants anger. The purpose for violating consent is irrelevant.

Using a user’s computer to spy on them when they don’t want it to is extremely rude, in all cases, even if the surveillance data is thrown away and never used.

Developers who implement such features should be named and highlighted and should have trouble finding new jobs. It’s shady and unethical to make such software, doing so should be a black mark on one’s professional record, just like stealing. It is literally malware.

Your assumption that violating consent is ok as long as it isn’t “nefarious” is the problem.