They already have, and they can do it in secret and hold people without trial. Once you give someone power, it’s hard to take it away.

I kept waiting for them to do something like this.

At this point Linux really needs a web tool (like Cockpit) that can show and manage these types of settings regardless of the distribution.

Usually… it’s usually best to read the privacy policy and user agreement. Almost all of them basically say that they can do whatever they want and that you waive your right to sue in court.