Because the number of companies that disable this company wide is large enough that google believes that by muddying the waters like this employees will give them the loophole they need to get back at that data.

The proper way to do this is:

Admin level:

- default to off

- options

  - enable

  - disable 

  - allow the user to set this

    - default to off

    - default to on