Correct. They indeed do this in the name of security as announcing they do it for profit would probably be bad PR.
"We're doing it for your own good, pinky promise"
alt Hacker News
"We're doing it for your own good, pinky promise"