It is a slippery slope they are on to be honest to collect data on users who haven't opted into any terms of service or anything like that. That's dodgy in a legal sense. Facebook is similarly getting chewed out for having shadow profiles, data that's collected about you before you even opt in or sign up (and it is the exact same scenario, other people share data about you without your permission). FFLogs makes it your problem to fix (by forcing you to have to go to your lodestone profile and add some tag).

I think its fine for people who want to opt in but collecting data on folks who haven't signed up is increasingly becoming very dodgy.