Did they? I mean, did they understand the privacy violation possible in this case? Or was the technical point they wouldn't understand somewhere in the middle of an agreement nobody reads anyway?

The difference in awareness is massive between those two use cases.