This is a risk issue. They need users to explicitly opt in or they risk user-data-related compliance suits. This has always been Google's problem, as an advertising company, and why they've taken so many seemingly awkward paths over the years with both Android & Cloud.