I agree with opt-in rather than opt-out. default into a safe/secure state is a basic principle of computer security. This is why Google Buzz's automatically adding followers was an awful idea, no matter how convenient it seems for users.