Nothing's stopping them from doing that, but you're incredibly naive if you think they're "protecting the average user" out of the goodness of their heart.